🇺🇸
TPI-Abuse
2026-11-14 17:19:42
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:19:36.051485 2026] [security2:error] [pid 11253:tid 11253] [client 194.99.27.61:53349] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:19:36.051485 2026] [security2:error] [pid 11253:tid 11253] [client 194.99.27.61:53349] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "aviYKAKN97FWVKBA-aAm4gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-10 02:16:34
UTC ·
(5 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-08 12:44:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:44:00.088508 2026] [security2:error] [pid 29551:tid 29551] [client 194.99.27.61:62785] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:44:00.088508 2026] [security2:error] [pid 29551:tid 29551] [client 194.99.27.61:62785] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.eroticperfection.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.eroticperfection.com"] [uri "/gals/metart164fa.html"] [unique_id "avBukGXpavcV6e9KQ34C0AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 09:45:04
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:44:59.819519 2026] [security2:error] [pid 9712:tid 9712] [client 194.99.27.61:24583] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:44:59.819519 2026] [security2:error] [pid 9712:tid 9712] [client 194.99.27.61:24583] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/privacy.html"] [unique_id "auxQGwahLZnq-rLeCS15fwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 22:47:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:47:10.392992 2026] [security2:error] [pid 26323:tid 26323] [client 194.99.27.61:19419] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:47:10.392992 2026] [security2:error] [pid 26323:tid 26323] [client 194.99.27.61:19419] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/gunpowder/"] [unique_id "aupkbs6PEKJM1JHdgv-m5AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-29 01:40:28
UTC ·
(2 weeks ago)
Not following 301 redirects — wasted requests | method: HEAD | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-27 21:47:49
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:47:41.386759 2026] [security2:error] [pid 10646:tid 10646] [client 194.99.27.61:42335] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:47:41.386759 2026] [security2:error] [pid 10646:tid 10646] [client 194.99.27.61:42335] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jamisongreen.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jamisongreen.com"] [uri "/jgassoc_013.htm"] [unique_id "auEb_RhRd-kfz30H_7zTvwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 13:19:04
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:18:59.185956 2026] [security2:error] [pid 26397:tid 26397] [client 194.99.27.61:62355] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:18:59.185956 2026] [security2:error] [pid 26397:tid 26397] [client 194.99.27.61:62355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cartiologyfilms.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cartiologyfilms.com"] [uri "/club-225/1995-bmw-850csi-162-daytona-violet/"] [unique_id "attew1jYsjWh6sHT8HAnowAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 00:56:28
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:56:20.508920 2026] [security2:error] [pid 8831:tid 8831] [client 194.99.27.61:44377] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:56:20.508920 2026] [security2:error] [pid 8831:tid 8831] [client 194.99.27.61:44377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/page2/page63/page63.html"] [unique_id "atqwtNGoWJM-b6iS_jovbAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-25 11:09:15
UTC ·
(1 month ago)
2026-09-25T13:09:14.446341+02:00 polaris wp(sahpa.co.za)[2256173]: Authentication attempt for unknown user
[email protected] from 194.99.27.61
...
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇫🇷
Tilellit.PRO
2026-03-05 17:35:02
UTC ·
(8 months ago)
Fail2Ban banned 194.99.27.61 for security violations in jail wp-armour. Log: 2026/03/05 17:35:02 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 194.99.27.61 | Target: wplogin" , client: 194.99.27.61, server: [REDACTED], request: "P ...
show more
Fail2Ban banned 194.99.27.61 for security violations in jail wp-armour. Log: 2026/03/05 17:35:02 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 194.99.27.61 | Target: wplogin" , client: 194.99.27.61, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇨🇭
backslash
2026-03-04 18:12:00
UTC ·
(8 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇲🇹
Malta
2025-01-27 13:22:10
UTC ·
(1 year ago)
194.99.27.61 - - [27/Jan/2025:14:22:10 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.115 Safari/537.36"
VPN IP
Hacking
Web App Attack
🇷🇺
sms.ru
2024-09-22 21:55:06
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
