🇺🇸
TPI-Abuse
2026-11-04 22:38:31
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:38:28.212076 2026] [security2:error] [pid 19597:tid 19597] [client 212.87.219.102:9875] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:38:28.212076 2026] [security2:error] [pid 19597:tid 19597] [client 212.87.219.102:9875] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/the-book/some-celebrated-themes/culture-of-the-intellect/"] [unique_id "auuz5JKgKTZ8t4HFHKBR6AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 11:17:34
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 07:17:30.730289 2026] [security2:error] [pid 31911:tid 31911] [client 212.87.219.102:44077] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 07:17:30.730289 2026] [security2:error] [pid 31911:tid 31911] [client 212.87.219.102:44077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/recstore/b/Bolkov1944r.html"] [unique_id "auXOSoloHo06Fq2KIpdR9QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 13:16:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:16:37.393842 2026] [security2:error] [pid 32236:tid 32236] [client 212.87.219.102:30361] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:16:37.393842 2026] [security2:error] [pid 32236:tid 32236] [client 212.87.219.102:30361] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bookingsouthafrica.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bookingsouthafrica.com"] [uri "/"] [unique_id "auSYtXwtLMZHQbkRXFUw2gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 09:52:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 05:52:33.523182 2026] [security2:error] [pid 9822:tid 9822] [client 212.87.219.102:20715] M ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 05:52:33.523182 2026] [security2:error] [pid 9822:tid 9822] [client 212.87.219.102:20715] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.anamericanabroad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.anamericanabroad.com"] [uri "/how-to-beat-jet-lag-on-long-haul-flights/"] [unique_id "auMXYa5h5qBndm56eXvR1AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:15:35
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:15:31.780258 2026] [security2:error] [pid 27948:tid 27948] [client 212.87.219.102:34955] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:15:31.780258 2026] [security2:error] [pid 27948:tid 27948] [client 212.87.219.102:34955] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||glassicannex.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "glassicannex.org"] [uri "/grill-shell.htm"] [unique_id "atv4o48mzH9QfRMJChqeagAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 03:49:01
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:48:54.977569 2026] [security2:error] [pid 24342:tid 24342] [client 212.87.219.102:39319] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:48:54.977569 2026] [security2:error] [pid 24342:tid 24342] [client 212.87.219.102:39319] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.brianaugervideo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.brianaugervideo.com"] [uri "/"] [unique_id "atg2JmZZ4HFCL33k-pJs_QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 00:20:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:20:05.558245 2026] [security2:error] [pid 19671:tid 19854] [client 212.87.219.102:38181] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:20:05.558245 2026] [security2:error] [pid 19671:tid 19854] [client 212.87.219.102:38181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntma1200.htm"] [unique_id "atgFNXbSFCl6XaaPBTfucQAAAgU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-04 11:39:52
UTC ·
(1 month ago)
[04/Oct/2026:11:39:50.499592 +0000] asI7BvQQZrlv9lr6kDaenwAAAAs 212.87.219.102 54525 [redacted] 443
[04/Oct/2026:11:39:51.517270 +0000] asI7B9NB2sEKHnk3Z70sxwAAAAo 212.87.219.102 32143 [redacted] 443
Hacking
Web App Attack
🇩🇪
C C
2026-08-11 22:05:31
UTC ·
(2 months ago)
Distributed scraping attack: 1244 req from 1212 rotating proxy IPs | this IP: 1 req
Open Proxy
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-08-04 11:25:03
UTC ·
(3 months ago)
2026/08/04 11:22:49 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇩🇪
tinect
2026-04-28 23:01:54
UTC ·
(6 months ago)
This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe
Web App Attack
🇩🇪
MusicLibrary
2026-04-22 19:08:31
UTC ·
(6 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-10 16:17:17
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 12:17:12.348284 2026] [security2:error] [pid 452913:tid 452913] [client 212.87.219.102:5533 ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 12:17:12.348284 2026] [security2:error] [pid 452913:tid 452913] [client 212.87.219.102:55333] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||laradioactivitat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laradioactivitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adkiiDYb_hNi8PIMWHK0bQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 04:38:09
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 00:38:02.474222 2026] [security2:error] [pid 44219:tid 44219] [client 212.87.219.102:23677] ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 00:38:02.474222 2026] [security2:error] [pid 44219:tid 44219] [client 212.87.219.102:23677] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||drdot.xyz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "drdot.xyz"] [uri "/wp-json/wp/v2/users"] [unique_id "adh-qq5PdE7wC0guDl_VHAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
