🇺🇸
TPI-Abuse
2026-10-28 11:01:18
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:01:10.596612 2026] [security2:error] [pid 16827:tid 16827] [client 212.119.40.174:53189] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:01:10.596612 2026] [security2:error] [pid 16827:tid 16827] [client 212.119.40.174:53189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/maamarim/drugie/10/Smil.html"] [unique_id "auHV9leHppwyB8NkRLsnGQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 16:38:58
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:38:51.395930 2026] [security2:error] [pid 30027:tid 30027] [client 212.119.40.174:64935] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:38:51.395930 2026] [security2:error] [pid 30027:tid 30027] [client 212.119.40.174:64935] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ericgwin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ericgwin.com"] [uri "/robots.txt"] [unique_id "at-CGy82Xu24hDOAD82CEwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 01:06:09
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 21:06:01.381228 2026] [security2:error] [pid 14777:tid 14777] [client 212.119.40.174:36795] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 21:06:01.381228 2026] [security2:error] [pid 14777:tid 14777] [client 212.119.40.174:36795] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.spectorworld.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.spectorworld.com"] [uri "/setupprocedure.htm"] [unique_id "at1V-RCOJF5FlhGKflolagAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:38:18
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:38:10.736442 2026] [security2:error] [pid 10168:tid 10168] [client 212.119.40.174:17081] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:38:10.736442 2026] [security2:error] [pid 10168:tid 10168] [client 212.119.40.174:17081] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||meganmurph.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "meganmurph.com"] [uri "/2020/04/14/and-lava-will-come-out-oozing-all-over-the-volcano/"] [unique_id "atDlUoQO-CctBFfn_-2v_gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:55:31
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:55:26.180818 2026] [security2:error] [pid 8629:tid 8629] [client 212.119.40.174:39711] M ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:55:26.180818 2026] [security2:error] [pid 8629:tid 8629] [client 212.119.40.174:39711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dodojuice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dodojuice.com"] [uri "/protection-stage-accessories.html"] [unique_id "atDNPuTN1t2T7z8tFfKOXAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 13:07:02
(2 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-07.212.119.40.174.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇨🇦
DRI
2026-07-25 17:45:04
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
2026-05-12 12:56:57
(5 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-24 03:55:26
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 22:55:22.081630 2026] [security2:error] [pid 17103:tid 17103] [client 212.119.40.174:45495] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.40.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 22:55:22.081630 2026] [security2:error] [pid 17103:tid 17103] [client 212.119.40.174:45495] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||missingfilm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "missingfilm.com"] [uri "/"] [unique_id "aZ0hKkAKAHSVZFbSdA4rQwAAAAA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-22 00:01:38
(8 months ago)
wordpress-trap
Web App Attack
🇳🇱
exxos
2025-10-28 08:03:01
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇨🇭
backslash
2025-05-14 09:15:05
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2024-12-21 14:06:20
(1 year ago)
Attempted brute force login to web vpn
Hacking
Brute-Force
🇨🇦
wil.com
2024-09-12 03:51:47
(2 years ago)
GlobalProtect login attempts with user info.
VPN IP
Brute-Force
2024-09-10 09:00:23
(2 years ago)
VPN Authentication Brute Force test
Brute-Force
