🇺🇸
TPI-Abuse
2026-11-08 05:46:05
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:46:00.064293 2026] [security2:error] [pid 4163:tid 4163] [client 212.18.127.82:62675] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:46:00.064293 2026] [security2:error] [pid 4163:tid 4163] [client 212.18.127.82:62675] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/1506"] [unique_id "avAMmG9YmwrQZUMziXXiPAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 09:47:37
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:47:33.327603 2026] [security2:error] [pid 25896:tid 25896] [client 212.18.127.82:64277] M ...
show more
(mod_security) mod_security (id:210350) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:47:33.327603 2026] [security2:error] [pid 25896:tid 25896] [client 212.18.127.82:64277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nwtree.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nwtree.com"] [uri "/blog/7-reasons-to-plant-trees-in-portland/"] [unique_id "aumttYC9p7YyTOcdh9gY2wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-02 00:30:20
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:29:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:29:29.561276 2026] [security2:error] [pid 11338:tid 11338] [client 212.18.127.82:48141] M ...
show more
(mod_security) mod_security (id:210350) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:29:29.561276 2026] [security2:error] [pid 11338:tid 11338] [client 212.18.127.82:48141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||suffe.cool|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "suffe.cool"] [uri "/poker/trip_report05.html"] [unique_id "auJpOdXVR0Dy962VQgjCCgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 14:00:46
UTC ·
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 09:00:42.440282 2026] [security2:error] [pid 19375:tid 19375] [client 212.18.127.82:61903] M ...
show more
(mod_security) mod_security (id:225170) triggered by 212.18.127.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 09:00:42.440282 2026] [security2:error] [pid 19375:tid 19375] [client 212.18.127.82:61903] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coroneta.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coroneta.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ2vCrGizgc4eEa_o44EoAAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-05-23 16:49:44
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-23T17:18:16+02:00 vpn Access-Reject '1965' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-23T17:18:16+02:00 vpn Access-Reject '1965' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-05-23T17:55:53+02:00 vpn Access-Reject 'acinaciform' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-05-22 12:21:44
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-22T13:01:51+02:00 vpn Access-Reject 'Hhairy' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-22T13:01:51+02:00 vpn Access-Reject 'Hhairy' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-05-22T13:23:43+02:00 vpn Access-Reject 'acidulant' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-05-21 07:50:19
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-21T08:30:37+02:00 vpn Access-Reject 'abbyabby' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-21T08:30:37+02:00 vpn Access-Reject 'abbyabby' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-05-21T08:40:12+02:00 vpn Access-Reject 'acidimetric' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-05-20 01:49:56
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-20T03:13:15+02:00 vpn Access-Reject 'billys' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.127.82
2025-05-20T03:13:15+02:00 vpn Access-Reject 'billys' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-05-20T03:16:00+02:00 vpn Access-Reject 'acid-forming' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-05-09 18:21:30
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.127.82
2025-05-09T19:27:28+02:00 vpn Access-Reject 'hershel' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.127.82
2025-05-09T19:27:28+02:00 vpn Access-Reject 'hershel' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-05-09 07:50:45
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.127.82
2025-05-09T09:02:40+02:00 vpn Access-Reject 'dasha' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.127.82
2025-05-09T09:02:40+02:00 vpn Access-Reject 'dasha' station: 212.18.127.82 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇦🇺
oncord
2025-04-17 14:10:06
UTC ·
(1 year ago)
Form spam
Web Spam
🇦🇺
oncord
2025-04-16 05:20:11
UTC ·
(1 year ago)
Form spam
Web Spam
🇬🇧
oncord
2025-04-01 04:21:11
UTC ·
(1 year ago)
Form spam
Web Spam
🇦🇺
oncord
2025-03-27 08:45:11
UTC ·
(1 year ago)
Form spam
Web Spam
