🇺🇸
TPI-Abuse
2026-11-08 11:43:11
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:42:58.475735 2026] [security2:error] [pid 21860:tid 21860] [client 213.232.120.97:31659] ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:42:58.475735 2026] [security2:error] [pid 21860:tid 21860] [client 213.232.120.97:31659] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/instrumental/aspiradordepipetasdeseguridadpobel.html"] [unique_id "avBgQgtOjcI9M7d_oPtsbAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 15:01:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:01:04.504399 2026] [security2:error] [pid 23630:tid 23630] [client 213.232.120.97:52961] ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:01:04.504399 2026] [security2:error] [pid 23630:tid 23630] [client 213.232.120.97:52961] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cortona.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cortona.ws"] [uri "/chiesa_maria_nuova_it.html"] [unique_id "au3rsESLCDnyeCDABvevqwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 02:32:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:31:54.068387 2026] [security2:error] [pid 9551:tid 9551] [client 213.232.120.97:22165] M ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:31:54.068387 2026] [security2:error] [pid 9551:tid 9551] [client 213.232.120.97:22165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/09/24/september-24-2014-arsenal-for-democracy-100/"] [unique_id "au08Gms2Fmhx1O7LTX91mAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:22:28
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:22:12.270496 2026] [security2:error] [pid 2209082:tid 2209101] [client 213.232.120.97:15 ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:22:12.270496 2026] [security2:error] [pid 2209082:tid 2209101] [client 213.232.120.97:15069] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||certifiedfinancialanalyst.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedfinancialanalyst.org"] [uri "/guides.html"] [unique_id "auk3ROvK1Bi7FUZKODAWkQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 07:04:16
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 03:03:59.512235 2026] [security2:error] [pid 10265:tid 10265] [client 213.232.120.97:19633] ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 03:03:59.512235 2026] [security2:error] [pid 10265:tid 10265] [client 213.232.120.97:19633] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cyclingboardgames.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cyclingboardgames.net"] [uri "/cycloculture.htm"] [unique_id "auRBX5cuRnePUf2oR3H8tAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:27:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:27:06.445857 2026] [security2:error] [pid 21118:tid 21118] [client 213.232.120.97:14869] ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:27:06.445857 2026] [security2:error] [pid 21118:tid 21118] [client 213.232.120.97:14869] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cnphilos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cnphilos.com"] [uri "/tom-tabor/"] [unique_id "auI-ev9mJdIXMn0cVB_-1wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-27 02:59:02
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 02:33:01
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 22:32:46.828799 2026] [security2:error] [pid 8329:tid 8329] [client 213.232.120.97:17661] M ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 22:32:46.828799 2026] [security2:error] [pid 8329:tid 8329] [client 213.232.120.97:17661] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sydneysue.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sydneysue.com"] [uri "/groomed-for-success.html"] [unique_id "atwYzuo6G-WD5znOrF2NgAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-01 08:48:49
UTC ·
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 03:48:35.072803 2026] [security2:error] [pid 17234:tid 17234] [client 213.232.120.97:32373] ...
show more
(mod_security) mod_security (id:225170) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 03:48:35.072803 2026] [security2:error] [pid 17234:tid 17234] [client 213.232.120.97:32373] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bernsteinip.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bernsteinip.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVY048pflZimYZo5ey9MBgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-31 23:49:48
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 18:49:41.296465 2025] [security2:error] [pid 22459:tid 22459] [client 213.232.120.97:63847] ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.120.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 18:49:41.296465 2025] [security2:error] [pid 22459:tid 22459] [client 213.232.120.97:63847] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.desarrollosdecolima.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.desarrollosdecolima.com"] [uri "/wp-login.php"] [unique_id "aVW2lY3nyTiDj92axYlt6gAAAAk"], referer: http://desarrollosdecolima.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
mawan
2025-10-16 19:59:39
UTC ·
(1 year ago)
Suspected of having performed illicit activity on AMS server.
Web App Attack
2025-08-27 22:45:04
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇿
lp
2025-08-16 22:51:46
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 213.232.120.97
2025-08-16T23:39:19+02:00 vpn Access-Reject 'zosiho' station: 213.232.120.97 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 213.232.120.97
2025-08-16T23:39:19+02:00 vpn Access-Reject 'zosiho' station: 213.232.120.97 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇷🇺
sms.ru
2024-09-23 05:50:07
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
2024-08-20 14:15:06
UTC ·
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
