🇺🇸
TPI-Abuse
2026-11-10 06:13:29
UTC ·
(26 minutes ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:13:22.436944 2026] [security2:error] [pid 24584:tid 24584] [client 62.204.49.25:54571] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:13:22.436944 2026] [security2:error] [pid 24584:tid 24584] [client 62.204.49.25:54571] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||socialstudiesforkids.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/articles/sevens/significantsevens-biggestpresidentialblowouts2.htm"] [unique_id "avK2Av5Edx11VWNPy9b2rgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:48:06
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:48:01.817092 2026] [security2:error] [pid 2522:tid 2522] [client 62.204.49.25:53057] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:48:01.817092 2026] [security2:error] [pid 2522:tid 2522] [client 62.204.49.25:53057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2013/08/07/turkish-pundit-hide-your-baby-bumps-future-moms/"] [unique_id "avGk4VzveqDM9j6gofA8FQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 02:24:35
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:24:31.841791 2026] [security2:error] [pid 26932:tid 26932] [client 62.204.49.25:49435] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:24:31.841791 2026] [security2:error] [pid 26932:tid 26932] [client 62.204.49.25:49435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/513-86-0.html"] [unique_id "au06X0OwwyCokhFaDhQqqwAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-01 00:56:30
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 17:01:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 13:01:41.535679 2026] [security2:error] [pid 14729:tid 14729] [client 62.204.49.25:61683] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 13:01:41.535679 2026] [security2:error] [pid 14729:tid 14729] [client 62.204.49.25:61683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/michel-kafando/"] [unique_id "auTNdVhd74lYS8pB92xgGAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:32:49
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:32:45.098959 2026] [security2:error] [pid 24606:tid 24606] [client 62.204.49.25:27969] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:32:45.098959 2026] [security2:error] [pid 24606:tid 24606] [client 62.204.49.25:27969] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fredlandia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fredlandia.com"] [uri "/category/services/"] [unique_id "auSAXdSmacqgkZf65Tx-TQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-07-21 07:16:08
UTC ·
(3 months ago)
Form spam
Web Spam
2026-07-17 13:51:16
UTC ·
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-51.62.204.49.25.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇩🇪
Hazzard
2026-07-02 03:34:23
UTC ·
(4 months ago)
(wordpress) Failed wordpress login from 62.204.49.25 (US/United States/-/-/-/[redacted]): (CF_ENABLE)
Brute-Force
🇺🇸
TPI-Abuse
2026-06-14 19:56:52
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 15:56:45.157128 2026] [security2:error] [pid 7881:tid 7881] [client 62.204.49.25:64801] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 62.204.49.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 15:56:45.157128 2026] [security2:error] [pid 7881:tid 7881] [client 62.204.49.25:64801] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oligofoundry.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oligofoundry.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai8HfRXBFlJm_6rSw2NlywAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-07-06 00:09:15
UTC ·
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇪🇸
10dencehispahard SL
2024-06-29 14:05:56
UTC ·
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
