🇺🇸
TPI-Abuse
2026-11-06 09:39:58
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:39:54.055469 2026] [security2:error] [pid 17504:tid 17504] [client 161.115.235.21:59357] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:39:54.055469 2026] [security2:error] [pid 17504:tid 17504] [client 161.115.235.21:59357] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ifilemuseum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ifilemuseum.com"] [uri "/"] [unique_id "au2gal5gyHHI1gnpe2JjJwAAAAo"], referer: http://i-file-museum.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 11:35:35
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 06:35:29.896808 2026] [security2:error] [pid 23812:tid 23812] [client 161.115.235.21:57061] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 06:35:29.896808 2026] [security2:error] [pid 23812:tid 23812] [client 161.115.235.21:57061] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mindtoken.app|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mindtoken.app"] [uri "/"] [unique_id "auckAbTdoQFN8eioSukIOwAAAC4"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 13:21:14
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 09:21:08.451519 2026] [security2:error] [pid 9406:tid 9406] [client 161.115.235.21:60977] M ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 09:21:08.451519 2026] [security2:error] [pid 9406:tid 9406] [client 161.115.235.21:60977] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mmmetalizing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mmmetalizing.com"] [uri "/"] [unique_id "asT1xBNtXw8Lm2KKurO2BQAAABc"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-05 17:13:22
UTC ·
(1 month ago)
Brute force
Brute-Force
2026-10-04 03:48:47
UTC ·
(1 month ago)
Unauthorized access (443/tcp/https)
Port Scan
Web App Attack
🇳🇱
soverin
2026-07-30 19:22:19
UTC ·
(3 months ago)
Network scan on port 80
Email Spam
🇺🇸
TPI-Abuse
2026-07-12 03:35:48
UTC ·
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 23:35:42.120740 2026] [security2:error] [pid 30792:tid 30792] [client 161.115.235.21:57191] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 23:35:42.120740 2026] [security2:error] [pid 30792:tid 30792] [client 161.115.235.21:57191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.evannine.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.evannine.com"] [uri "/Wedding Ceremonies.htm"] [unique_id "alMLjqsEn_axL4x0-1rlEgAAABU"], referer: http://evansweddingceremonies.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-12 00:54:54
UTC ·
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 20:54:51.572797 2026] [security2:error] [pid 1047965:tid 1047965] [client 161.115.235.21:59 ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 20:54:51.572797 2026] [security2:error] [pid 1047965:tid 1047965] [client 161.115.235.21:59713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.periodpiano.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.periodpiano.org"] [uri "/index.html"] [unique_id "alLl2ylZSwmE2u-CKpKfCgAAABA"], referer: http://periodpianocollection.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-11 23:20:33
UTC ·
(3 months ago)
Malicious activity detected
Hacking
Web App Attack
2026-06-29 14:56:37
UTC ·
(4 months ago)
Unauthorized access (443/tcp/https)
Port Scan
Web App Attack
2026-06-06 19:50:00
UTC ·
(5 months ago)
BLOCKED Bad Bot Traffic - Port Scans From Several fluxtelecom.com IPs
Port Scan
Brute-Force
Bad Web Bot
Hacking
🇺🇸
TPI-Abuse
2026-05-23 11:05:26
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 07:05:21.355459 2026] [security2:error] [pid 8482:tid 8482] [client 161.115.235.21:44397] M ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 07:05:21.355459 2026] [security2:error] [pid 8482:tid 8482] [client 161.115.235.21:44397] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||netpet.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "netpet.batw.net"] [uri "/"] [unique_id "ahGJ8T9hDVzH2bLlip1NCgAAAAk"], referer: http://netpet.info/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-19 03:43:03
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 23:42:56.668238 2026] [security2:error] [pid 11247:tid 11247] [client 161.115.235.21:50063] ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.235.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 23:42:56.668238 2026] [security2:error] [pid 11247:tid 11247] [client 161.115.235.21:50063] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||konahawaii.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "konahawaii.com"] [uri "/"] [unique_id "agvcQK-kxKKkip-cda6DPwAAAAo"], referer: http://bestweatherintheworld.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-05-16 18:59:04
UTC ·
(5 months ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
Hacking
Brute-Force
SSH
🇩🇪
HandyTreff.de
2026-05-16 10:41:56
UTC ·
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.504 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51
Web App Attack
Bad Web Bot
