🇺🇸
TPI-Abuse
2026-11-12 13:55:40
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:55:35.222715 2026] [security2:error] [pid 7027:tid 7027] [client 213.232.121.162:33857] ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:55:35.222715 2026] [security2:error] [pid 7027:tid 7027] [client 213.232.121.162:33857] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.clubfansite.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clubfansite.com"] [uri "/vf_m.php"] [unique_id "avXFV0-JCvdlx3pHUX7zYAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 03:01:32
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:01:16.020181 2026] [security2:error] [pid 27707:tid 27707] [client 213.232.121.162:6267 ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:01:16.020181 2026] [security2:error] [pid 27707:tid 27707] [client 213.232.121.162:62677] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "avUr_KhTWXAkycpfKya6LAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 03:10:12
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:09:48.746602 2026] [security2:error] [pid 23546:tid 23546] [client 213.232.121.162:4876 ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:09:48.746602 2026] [security2:error] [pid 23546:tid 23546] [client 213.232.121.162:48763] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.coolingsprings.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.coolingsprings.org"] [uri "/Cooling_Springs/2006.html"] [unique_id "avPcfN1c4_cgDnRA46ErgQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 10:19:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:19:31.709975 2026] [security2:error] [pid 1488:tid 1488] [client 213.232.121.162:25783] ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:19:31.709975 2026] [security2:error] [pid 1488:tid 1488] [client 213.232.121.162:25783] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/npp/quiver.htm"] [unique_id "auxYM2uz0cY1ntYkhfGNyAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 11:12:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:11:58.386497 2026] [security2:error] [pid 18112:tid 18112] [client 213.232.121.162:5252 ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:11:58.386497 2026] [security2:error] [pid 18112:tid 18112] [client 213.232.121.162:52523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.energycapitalinvestments.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.energycapitalinvestments.com"] [uri "/privacy-policy/"] [unique_id "aunBfla0y5q6QWfTOwHAxAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:45:55
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:45:42.133874 2026] [security2:error] [pid 22086:tid 22086] [client 213.232.121.162:5022 ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:45:42.133874 2026] [security2:error] [pid 22086:tid 22086] [client 213.232.121.162:50229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/03/30/the-benghazi-scandal-witchhunt-made-the-world-less-stable/"] [unique_id "auW4xiQiM4CQLNsk3LMXXAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 05:53:02
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 01:52:45.857056 2026] [security2:error] [pid 20941:tid 20941] [client 213.232.121.162:2389 ...
show more
(mod_security) mod_security (id:210350) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 01:52:45.857056 2026] [security2:error] [pid 20941:tid 20941] [client 213.232.121.162:23895] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.r-390a.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.r-390a.net"] [uri "/faq-refs.htm"] [unique_id "athTLcqXdAijadl-gmZoxQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-21 13:28:37
UTC ·
(5 months ago)
(mod_security) mod_security (id:240335) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 09:28:29.854017 2026] [security2:error] [pid 4959:tid 4959] [client 213.232.121.162:56157] ...
show more
(mod_security) mod_security (id:240335) triggered by 213.232.121.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 09:28:29.854017 2026] [security2:error] [pid 4959:tid 4959] [client 213.232.121.162:56157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 213.232.121.162 (+1 hits since last alert)|hvacmechanalysis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hvacmechanalysis.com"] [uri "/xmlrpc.php"] [unique_id "ag8IfaEKzKv1vTcxpC3RUAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-20 15:10:09
UTC ·
(5 months ago)
FPROCO WEBEXPLOIT 213.232.121.162 (213.232.121.162)
Web App Attack
🇺🇸
kosada.com
2026-05-19 01:32:20
UTC ·
(5 months ago)
Web password guessing
Brute-Force
🇨🇭
4server
2026-04-24 12:26:43
UTC ·
(6 months ago)
[FriApr2414:26:32.3349692026][security2:error][pid431947:tid431958][client213.232.121.162:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ...
show more
[FriApr2414:26:32.3349692026][security2:error][pid431947:tid431958][client213.232.121.162:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.noisetosound.ch\"][uri\"/robots.txt\"][unique_id\"aetheP-dISPI-z4-ZBhahQAAAIk\"]\,referer:http://www.noisetosound.ch/robots.txt
show less
Hacking
Web App Attack
🇩🇪
ps-center
2022-02-12 08:38:19
UTC ·
(4 years ago)
SS5,Magento Bruteforce Login Attack POST /index.php/admin/
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2022-02-10 12:43:51
UTC ·
(4 years ago)
SS5,Magento Bruteforce Login Attack POST /index.php/admin/
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2022-01-29 06:45:17
UTC ·
(4 years ago)
C1,Magento Bruteforce Login Attack POST /index.php/admin/
Web Spam
Bad Web Bot
Web App Attack
🇪🇪
Unwasted
2022-01-26 06:33:36
UTC ·
(4 years ago)
Magento admin pass test (wrong country)
Hacking
Brute-Force
Web App Attack
