🇳🇱
soverin
2026-11-10 17:45:48
UTC ·
(21 hours ago)
Network scan on port 443
Email Spam
🇩🇪
HandyTreff.de
2026-09-08 06:46:25
UTC ·
(2 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.556 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-05 05:08:14
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 01:08:09.873253 2026] [security2:error] [pid 3842993:tid 3843033] [client 161.115.234.30:53 ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 01:08:09.873253 2026] [security2:error] [pid 3842993:tid 3843033] [client 161.115.234.30:53871] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ceresfund.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ceresfund.com"] [uri "/management"] [unique_id "apujuQiVIYdan8eUV_IkpAAAAMo"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
YF
2026-09-04 07:30:46
UTC ·
(2 months ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 12:47:55
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:47:48.857527 2026] [security2:error] [pid 26095:tid 26102] [client 161.115.234.30:42363] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:47:48.857527 2026] [security2:error] [pid 26095:tid 26102] [client 161.115.234.30:42363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||earthlingtechnology.geoception.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "earthlingtechnology.geoception.com"] [uri "/"] [unique_id "apV39I3fAnv0IHndOZstgAAAAMM"], referer: http://earthlingtechnology.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
gerensat
2026-07-25 15:42:39
UTC ·
(3 months ago)
2026-07-25 12:42:39 | / | [] | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Web App Attack
🇫🇷
polido
2026-07-04 06:12:34
UTC ·
(4 months ago)
Unauthorized connection attempt to port 443 from 161.115.234.30
Port Scan
🇺🇸
TPI-Abuse
2026-06-27 23:43:58
UTC ·
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 19:43:55.037806 2026] [security2:error] [pid 8567:tid 8567] [client 161.115.234.30:51761] M ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 19:43:55.037806 2026] [security2:error] [pid 8567:tid 8567] [client 161.115.234.30:51761] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hienle.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hienle.com"] [uri "/"] [unique_id "akBgO6zJ3Fpk-GuK6jf-iQAAAA8"], referer: http://hienle.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
blinx
2026-06-26 19:33:26
UTC ·
(4 months ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 05:02:34
UTC ·
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 01:02:29.818453 2026] [security2:error] [pid 14861:tid 14861] [client 161.115.234.30:58077] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 01:02:29.818453 2026] [security2:error] [pid 14861:tid 14861] [client 161.115.234.30:58077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.filmpolis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.filmpolis.com"] [uri "/"] [unique_id "ajTNZW4eTeBZeHTPr1q_HAAAAAs"], referer: http://filmpolis.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-28 04:02:43
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 00:02:40.323759 2026] [security2:error] [pid 17975:tid 17975] [client 161.115.234.30:52289] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 00:02:40.323759 2026] [security2:error] [pid 17975:tid 17975] [client 161.115.234.30:52289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.iheldt.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.iheldt.net"] [uri "/"] [unique_id "ahe-YP4ErqkNZhGujknsyQAAAAw"], referer: http://ingridheldt.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-28 02:58:05
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 22:58:00.380830 2026] [security2:error] [pid 2258:tid 2258] [client 161.115.234.30:48601] M ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 22:58:00.380830 2026] [security2:error] [pid 2258:tid 2258] [client 161.115.234.30:48601] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cerrovictoria.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cerrovictoria.com"] [uri "/"] [unique_id "ahevOLIN2AKqE2sTL4mAhgAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 01:38:58
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 21:38:52.687340 2026] [security2:error] [pid 11904:tid 11904] [client 161.115.234.30:55501] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 21:38:52.687340 2026] [security2:error] [pid 11904:tid 11904] [client 161.115.234.30:55501] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||calvetparis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "calvetparis.com"] [uri "/"] [unique_id "ag0QrGEAl_UKX9nXIpHK2QAAABQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 06:32:31
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 02:32:23.319738 2026] [security2:error] [pid 15407:tid 15407] [client 161.115.234.30:35923] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 02:32:23.319738 2026] [security2:error] [pid 15407:tid 15407] [client 161.115.234.30:35923] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||atm.michaelpmcgrath.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "atm.michaelpmcgrath.com"] [uri "/"] [unique_id "aglg92Jx-009-S5hwv2qEAAAABM"], referer: http://leftcoastatm.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 13:02:17
UTC ·
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 09:02:11.946289 2026] [security2:error] [pid 20392:tid 20392] [client 161.115.234.30:38861] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 09:02:11.946289 2026] [security2:error] [pid 20392:tid 20392] [client 161.115.234.30:38861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.weddingcp.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.weddingcp.com"] [uri "/"] [unique_id "afnqU9ZkLm4z5tFLgaVa5QAAAAE"], referer: http://weddingcapitalpartner.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
