🇺🇸
TPI-Abuse
2026-11-03 17:07:13
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 212.119.41.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:07:08.772045 2026] [security2:error] [pid 27405:tid 27405] [client 212.119.41.95:32933] M ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.41.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:07:08.772045 2026] [security2:error] [pid 27405:tid 27405] [client 212.119.41.95:32933] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/cia/page/3/"] [unique_id "auoUvDznEZRXhpOrTxbw4QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 07:24:03
UTC ·
(5 days ago)
Banned by SPAMHAUS ASN-DROP list (ASN: 35830)
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 06:42:36
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.119.41.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:42:32.617796 2026] [security2:error] [pid 11376:tid 11398] [client 212.119.41.95:32413] M ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.41.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:42:32.617796 2026] [security2:error] [pid 11376:tid 11398] [client 212.119.41.95:32413] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||riversideturners.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "riversideturners.com"] [uri "/"] [unique_id "at72WApcqXgVSNtnprumdgAAARA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 20:53:44
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 212.119.41.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:53:37.280098 2026] [security2:error] [pid 19147:tid 19147] [client 212.119.41.95:15321] M ...
show more
(mod_security) mod_security (id:210350) triggered by 212.119.41.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:53:37.280098 2026] [security2:error] [pid 19147:tid 19147] [client 212.119.41.95:15321] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||asbechiro.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "asbechiro.com"] [uri "/2.html"] [unique_id "atfU0QK5R1mjVB4W0wq12gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-15 13:38:30
UTC ·
(1 month ago)
WordPress login attempt
Brute-Force
🇨🇭
backslash
2026-09-07 10:27:08
UTC ·
(2 months ago)
block ruleset 7B8FD6B12C4E12B6F0DAE02E53C0597FBEDDF5BC
Bad Web Bot
Anonymous
2026-06-27 19:47:29
UTC ·
(4 months ago)
Web App Attack
🇸🇬
ANTI SCANNER
2025-12-27 19:55:45
UTC ·
(10 months ago)
Scanner : /wp-login.php
Web Spam
🇮🇩
BPS-StatisticsIndonesia
2025-12-24 23:15:30
UTC ·
(10 months ago)
WP Login Scan Activities
Web App Attack
🇺🇸
uira.live
2025-06-09 03:23:45
UTC ·
(1 year ago)
Malicious activity detected from 35830 BTTGROUP-AS towards host uira.live (GET HTTP/2) @ 2025-06-09T03:23:45Z (3 occurrences)
DDoS Attack
🇲🇽
licjperezl
2025-06-05 18:02:08
UTC ·
(1 year ago)
Ataque de diccionario o DDoS en nuestros servicios en linea
Brute-Force
🇨🇦
wil.com
2025-05-30 01:58:28
UTC ·
(1 year ago)
GlobalProtect login attempts with user saguilar.
VPN IP
Brute-Force
🇮🇳
wizard1411
2025-05-29 23:02:24
UTC ·
(1 year ago)
DDoS and brute force activity detected
Brute-Force
SSH
🇮🇳
wizard1411
2025-05-29 23:02:24
UTC ·
(1 year ago)
DDoS and brute force activity detected
Brute-Force
SSH
🇮🇳
wizard1411
2025-05-29 23:02:24
UTC ·
(1 year ago)
DDoS and brute force activity detected
Brute-Force
SSH