🇺🇸
TPI-Abuse
2026-11-15 07:24:40
UTC ·
(57 minutes ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:24:35.547055 2026] [security2:error] [pid 18711:tid 18711] [client 217.145.224.72:26339] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:24:35.547055 2026] [security2:error] [pid 18711:tid 18711] [client 217.145.224.72:26339] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avleM_Sdegoiyi15bnzyIQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 10:56:10
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:56:05.430203 2026] [security2:error] [pid 32149:tid 32149] [client 217.145.224.72:50001] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:56:05.430203 2026] [security2:error] [pid 32149:tid 32149] [client 217.145.224.72:50001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cortona.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cortona.ws"] [uri "/porta_colonia_it.html"] [unique_id "avg-Rc0ioO07uHtYtrCIRAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 08:15:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:15:39.419624 2026] [security2:error] [pid 18918:tid 18918] [client 217.145.224.72:24849] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:15:39.419624 2026] [security2:error] [pid 18918:tid 18918] [client 217.145.224.72:24849] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tulsatvmemories.com"] [uri "/kgct.html"] [unique_id "avgYq6dMybZuVTvWHmSJxAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 14:43:22
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:43:16.131222 2026] [security2:error] [pid 11953:tid 11953] [client 217.145.224.72:46915] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:43:16.131222 2026] [security2:error] [pid 11953:tid 11953] [client 217.145.224.72:46915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/npp/jdbb.htm"] [unique_id "avMthBw_LWjLC4SEciZMtgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 03:30:56
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:30:54.034538 2026] [security2:error] [pid 32517:tid 32517] [client 217.145.224.72:60507] ...
show more
(mod_security) mod_security (id:210350) triggered by 217.145.224.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:30:54.034538 2026] [security2:error] [pid 32517:tid 32517] [client 217.145.224.72:60507] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2023/01/08/unlocked-feb-9-2021-state-level-labor-law-part-ii-arsenal-for-democracy-ep-349/"] [unique_id "auQPbiteUJNyid9tSov9SgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-14 00:22:29
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2026-09-14T01:35:30+02:00 vpn Access-Reject 'Lijo' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2026-09-14T01:35:30+02:00 vpn Access-Reject 'Lijo' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-13 09:22:29
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 217.145.224.72
2026-09-13T10:04:38+02:00 vpn Access-Reject 'EXE-MOSAIC7' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<r ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 217.145.224.72
2026-09-13T10:04:38+02:00 vpn Access-Reject 'EXE-MOSAIC7' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T10:06:30+02:00 vpn Access-Reject 'KYDO-TY4' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T10:08:12+02:00 vpn Access-Reject 'EXE-MOSAIC6' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T11:10:44+02:00 vpn Access-Reject 'ALFA-DIR51' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-11 00:10:02
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2025-05-16 03:12:12
UTC ·
(1 year ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇨🇿
lp
2025-03-20 16:28:16
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2025-03-20T16:11:20+01:00 vpn Access-Reject 'john3' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2025-03-20T16:11:20+01:00 vpn Access-Reject 'john3' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-18 17:54:36
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2025-03-18T18:33:24+01:00 vpn Access-Reject 'jetsax' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2025-03-18T18:33:24+01:00 vpn Access-Reject 'jetsax' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-17 01:24:57
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 217.145.224.72
2025-03-17T01:30:01+01:00 vpn Access-Reject 'joe1968' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 217.145.224.72
2025-03-17T01:30:01+01:00 vpn Access-Reject 'joe1968' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-03-17T01:30:23+01:00 vpn Access-Reject 'johnbur' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-16 02:52:03
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2025-03-16T02:48:38+01:00 vpn Access-Reject 'nike' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 217.145.224.72
2025-03-16T02:48:38+01:00 vpn Access-Reject 'nike' station: 217.145.224.72 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TheMadBeaker
2023-08-14 00:24:42
UTC ·
(3 years ago)
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
Hacking
SQL Injection
2022-01-05 09:32:52
UTC ·
(4 years ago)
Web App Attack
