🇺🇸
TPI-Abuse
2026-10-16 16:15:19
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 212.119.41.231 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.41.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:15:16.026628 2026] [security2:error] [pid 4826:tid 4826] [client 212.119.41.231:62209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||myndsong.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "myndsong.com"] [uri "/bio_jfw.htm"] [unique_id "atJNlDMj-LVz5BTCMGWx7wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-18 10:23:21
(4 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇨🇦
DRI
2026-09-16 00:00:31
(1 month ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-15 13:18:05
(1 month ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-24 11:30:53
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 212.119.41.231 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.41.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 07:30:46.891209 2026] [security2:error] [pid 18791:tid 18791] [client 212.119.41.231:48219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/adminer/index.php"] [unique_id "aju_5pYHGXxnFruHI8OfuQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-24 10:47:49
(3 months ago)
Web vulnerability probing: /adminer/
Web App Attack
🇫🇷
tecnicorioja
2026-05-16 22:01:01
(5 months ago)
wp-login attack [16/May/2026:20:25:15
Brute-Force
Web App Attack
🇺🇸
stechusa
2026-05-06 14:41:56
(5 months ago)
[Askari] | country=IL | Behavior: Concurrent page load during attack, No referrer on deep pages, HTT ...
show more
[Askari] | country=IL | Behavior: Concurrent page load during attack, No referrer on deep pages, HTTP/1.1 over TLS, Targeting specific pages
show less
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-05-06 14:41:56
(5 months ago)
ELEVATED_THREAT | country=IL | ASN=Fast Servers (Pty) Ltd | AbuseIPDB=0% | 21 IPs targeting /brand/s ...
show more
ELEVATED_THREAT | country=IL | ASN=Fast Servers (Pty) Ltd | AbuseIPDB=0% | 21 IPs targeting /brand/sylvania.html | Facet request during elevated threat (facet_ratio=0.75, unique_ips=63) | HTTP/1.1 over TLS (elevated=True)
show less
Bad Web Bot
DDoS Attack
🇨🇿
lp
2025-12-02 23:51:42
(10 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.231
2025-12-02T23:30:16+01 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.231
2025-12-02T23:30:16+01:00 vpn Access-Reject 'serveur' station: 212.119.41.231 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇮🇳
Altis Shield
2025-12-01 02:39:21
(10 months ago)
Possible port scan detected from 212.119.41.231 (masscan/nmap signature)
Email Spam
Port Scan
🇨🇿
lp
2025-11-30 20:51:18
(10 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.231
2025-11-30T21:17:57+01 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 212.119.41.231
2025-11-30T21:17:57+01:00 vpn Access-Reject 'ladislav.vereb' station: 212.119.41.231 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2025-11-30 20:15:55
(10 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
octageeks.com
2025-07-18 04:16:30
(1 year ago)
Wordpress malicious attack:[octa404]
Web App Attack
🇺🇸
TPI-Abuse
2025-06-21 01:45:52
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 212.119.41.231 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 212.119.41.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 21:45:47.073842 2025] [security2:error] [pid 3078925:tid 3078925] [client 212.119.41.231:46077] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Ashton II Recliner/Havana Brown/Thumbs.db"] [unique_id "aFYOy1Ao8OyD0WSKn5IoqwAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Ashton%20II%20Recliner/Havana%20Brown/
show less
Brute-Force
Bad Web Bot
Web App Attack