🇺🇸
TPI-Abuse
2026-11-10 15:25:41
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:25:36.946230 2026] [security2:error] [pid 11500:tid 11500] [client 216.40.73.41:40713] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:25:36.946230 2026] [security2:error] [pid 11500:tid 11500] [client 216.40.73.41:40713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/shen/shen14.html"] [unique_id "avM3cO_c0XVvEao4ONYrXgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:40:15
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:40:10.257714 2026] [security2:error] [pid 29445:tid 29445] [client 216.40.73.41:29065] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:40:10.257714 2026] [security2:error] [pid 29445:tid 29445] [client 216.40.73.41:29065] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/e7db3006c018c1c4862566bd000abc75/91a60f7d7a22bfa886256b2e004e147d_7b4ad6db.html"] [unique_id "avKuOlW8dUImHBDDpjxqpQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:17:30
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:17:23.696398 2026] [security2:error] [pid 9155:tid 9155] [client 216.40.73.41:38145] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:17:23.696398 2026] [security2:error] [pid 9155:tid 9155] [client 216.40.73.41:38145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/central-african-republic/page/3/"] [unique_id "avFzg1VTCwO_LJwJ0_OSBwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 18:59:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 13:59:38.215369 2026] [security2:error] [pid 15641:tid 15641] [client 216.40.73.41:22335] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 13:59:38.215369 2026] [security2:error] [pid 15641:tid 15641] [client 216.40.73.41:22335] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/06/28/when-bad-people-are-good-at-politics/"] [unique_id "aueMGlO0j7VcEUy8H4kgwQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:49:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:49:07.436060 2026] [security2:error] [pid 2417:tid 2417] [client 216.40.73.41:34331] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:49:07.436060 2026] [security2:error] [pid 2417:tid 2417] [client 216.40.73.41:34331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nwarchitect.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nwarchitect.com"] [uri "/largeadditions.html"] [unique_id "auJt02s3IIscmi4D7Yl0NAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-27 19:19:05
UTC ·
(2 weeks ago)
Botnet flood DDOS activity
Web App Attack
🇨🇭
backslash
2026-08-28 00:57:06
UTC ·
(2 months ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
2026-08-06 09:10:05
UTC ·
(3 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
🇺🇸
oralunal
2026-04-03 13:55:19
UTC ·
(7 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
2026-02-17 23:14:11
UTC ·
(8 months ago)
GlobalProtect Password Spraying
Brute-Force
