🇺🇸
TPI-Abuse
2026-10-24 17:52:55
(53 minutes ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.99 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:52:50.027302 2026] [security2:error] [pid 32425:tid 32425] [client 62.204.49.99:53003] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.christineohlman.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.christineohlman.net"] [uri "/index_tde_reviews.html"] [unique_id "atzwcmaQEKaXnpe1ufXhAwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 09:52:45
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.99 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:52:42.650077 2026] [security2:error] [pid 22927:tid 22927] [client 62.204.49.99:50263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexgitlin.com"] [uri "/ryan.html"] [unique_id "atc56s8lv79olSoiha0C-QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 23:25:07
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.99 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 19:25:03.201699 2026] [security2:error] [pid 27140:tid 27140] [client 62.204.49.99:40041] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/y.k/sl1.html"] [unique_id "aqcwz-vG0fDeK_3fv0DyNAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-09-13 13:19:15
(1 month ago)
Form spam
Web Spam
🇨🇭
backslash
2026-09-10 12:30:00
(1 month ago)
Web Spam
🇬🇧
relianoid.com
2026-08-20 20:25:13
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇫🇮
JimArchon72
2026-08-14 04:55:03
(2 months ago)
2026/08/14 04:54:58 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇬🇧
Oakley
2026-07-08 15:56:47
(3 months ago)
(mod_security) mod_security (id:900177) triggered by 62.204.49.99 (US/United States/-): 5 in the las ...
show more
(mod_security) mod_security (id:900177) triggered by 62.204.49.99 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇫🇮
JimArchon72
2026-07-05 02:45:03
(3 months ago)
2026/07/05 02:43:09 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇬🇧
relianoid.com
2026-07-02 22:18:56
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇩🇪
Lino Project
2026-06-09 06:22:11
(4 months ago)
62.204.49.99 - - [09/Jun/2026:08:22:10 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primo ...
show more
62.204.49.99 - - [09/Jun/2026:08:22:10 +0200] "GET /xmlrpc.php HTTP/1.1" 403 3972 "https://www.primobio.it/mio-account/?action=register" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-20 02:26:36
(8 months ago)
GlobalProtect Password Spraying
Brute-Force
2026-01-04 21:32:21
(9 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇷🇺
sms.ru
2024-09-28 13:40:06
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
Yawning Angel
2024-08-27 16:09:29
(2 years ago)
logdesc=SSL VPN login fail user=caren remip=62.204.49.99 reason=sslvpn_login_permission_denied
Hacking
Brute-Force
