🇺🇸
etu brutus
2026-11-14 23:31:12
UTC ·
(7 hours ago)
161.115.235.12 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇺🇸
azminawwar
2026-09-01 09:06:05
UTC ·
(2 months ago)
[161.115.235.12] triggered by honeypot on port [80], Timestamp [2026-09-01T09:06:05Z]METHOD=GET PATH=/ HTTP=HTTP/1.1 UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-08-28 17:37:45
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:37:41.823391 2026] [security2:error] [pid 9329:tid 9329] [client 161.115.235.12:33005] M ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:37:41.823391 2026] [security2:error] [pid 9329:tid 9329] [client 161.115.235.12:33005] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.darnorb.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.darnorb.com"] [uri "/Ohlenbusch"] [unique_id "apHHZQvMquv7RxrqiqP9awAAAAE"], referer: http://ohlenbusch.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 15:02:29
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 11:02:22.168690 2026] [security2:error] [pid 5732:tid 5740] [client 161.115.235.12:56767] M ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 11:02:22.168690 2026] [security2:error] [pid 5732:tid 5740] [client 161.115.235.12:56767] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aafm.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aafm.us"] [uri "/certification.html/contact.html"] [unique_id "aom5_vZvh89aaueW_uCbvQAAAYA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 10:22:42
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 06:22:36.454992 2026] [security2:error] [pid 14104:tid 14127] [client 161.115.235.12:46351] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 06:22:36.454992 2026] [security2:error] [pid 14104:tid 14127] [client 161.115.235.12:46351] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.stephanietobola.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stephanietobola.com"] [uri "/index.html"] [unique_id "aol4bEEa3ufDLopbtRRvWgAAAVU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 06:20:03
UTC ·
(4 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:19:58.766443 2026] [security2:error] [pid 20826:tid 20877] [client 161.115.235.12:56189] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:19:58.766443 2026] [security2:error] [pid 20826:tid 20877] [client 161.115.235.12:56189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mjkotob.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mjkotob.com"] [uri "/ourteam"] [unique_id "akYDDg_kPxDmdt-1dx0oMgAAAQ8"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-28 14:11:02
UTC ·
(4 months ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 19:48:36
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 15:48:29.643457 2026] [security2:error] [pid 11851:tid 11851] [client 161.115.235.12:54425] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 15:48:29.643457 2026] [security2:error] [pid 11851:tid 11851] [client 161.115.235.12:54425] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.performingartsguild.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.performingartsguild.com"] [uri "/"] [unique_id "ahSnjT3V8bquTOLIjguBsAAAAAM"], referer: http://pagfoundation.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 00:14:50
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 20:14:43.252153 2026] [security2:error] [pid 23863:tid 23976] [client 161.115.235.12:50853] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 20:14:43.252153 2026] [security2:error] [pid 23863:tid 23976] [client 161.115.235.12:50853] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rawsynergy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rawsynergy.com"] [uri "/"] [unique_id "ahOUcwxm6uY01pY3tkJt2gAAAhg"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 16:50:43
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 12:50:37.454065 2026] [security2:error] [pid 13405:tid 13405] [client 161.115.235.12:49027] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 12:50:37.454065 2026] [security2:error] [pid 13405:tid 13405] [client 161.115.235.12:49027] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.lindaporcello.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lindaporcello.com"] [uri "/"] [unique_id "ahCJXQ9m1EjJs92bmABJrAAAAAY"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 12:09:13
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:09:05.832012 2026] [security2:error] [pid 10022:tid 10022] [client 161.115.235.12:33571] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:09:05.832012 2026] [security2:error] [pid 10022:tid 10022] [client 161.115.235.12:33571] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garbothemusical.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garbothemusical.net"] [uri "/"] [unique_id "ahBHYUg6jqBA8JwdVD6MjAAAAAc"], referer: http://garbothemusical.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 23:43:26
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 19:43:18.683879 2026] [security2:error] [pid 22136:tid 22136] [client 161.115.235.12:53447] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 19:43:18.683879 2026] [security2:error] [pid 22136:tid 22136] [client 161.115.235.12:53447] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.affourtit-bowmaker.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.affourtit-bowmaker.com"] [uri "/"] [unique_id "ag-Ylk1t33gouZqbsqJeIAAAACI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 19:12:29
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 15:12:25.459059 2026] [security2:error] [pid 10086:tid 10135] [client 161.115.235.12:60751] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 15:12:25.459059 2026] [security2:error] [pid 10086:tid 10135] [client 161.115.235.12:60751] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishrapper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishrapper.com"] [uri "/"] [unique_id "agtkmWMTK1rUY4uwex-WTgAAAUo"], referer: http://thefishrapper.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-16 12:03:55
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 08:03:48.575724 2026] [security2:error] [pid 19201:tid 19235] [client 161.115.235.12:40963] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 08:03:48.575724 2026] [security2:error] [pid 19201:tid 19235] [client 161.115.235.12:40963] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||osp.schoprint.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "osp.schoprint.com"] [uri "/"] [unique_id "aghdJN-4puNCVLNhB2ovpAAAABI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 09:14:10
UTC ·
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:14:03.880965 2026] [security2:error] [pid 31166:tid 31166] [client 161.115.235.12:50939] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:14:03.880965 2026] [security2:error] [pid 31166:tid 31166] [client 161.115.235.12:50939] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.liveinbirminghamalabama.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.liveinbirminghamalabama.com"] [uri "/"] [unique_id "af2pWxdc4qB4QMcTAkZ1XAAAABQ"], referer: http://mountainbrookluxuryhomes.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
