🇺🇸
TPI-Abuse
2026-11-07 22:38:20
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:38:16.291184 2026] [security2:error] [pid 2386472:tid 2386487] [client 88.218.46.215:2033 ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:38:16.291184 2026] [security2:error] [pid 2386472:tid 2386487] [client 88.218.46.215:20335] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||financialcertified.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "financialcertified.com"] [uri "/Privacy.html"] [unique_id "au-oWLZ4Jyc5Kg549stxzwAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 19:53:04
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:52:59.803542 2026] [security2:error] [pid 23108:tid 23108] [client 88.218.46.215:54643] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:52:59.803542 2026] [security2:error] [pid 23108:tid 23108] [client 88.218.46.215:54643] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/10/25/despite-a-rising-war-libyas-oil-keeps-flowing/"] [unique_id "aujqG4vVgIEnyOTmKQjBbQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:19:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:19:37.593236 2026] [security2:error] [pid 16181:tid 16216] [client 88.218.46.215:46199] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:19:37.593236 2026] [security2:error] [pid 16181:tid 16216] [client 88.218.46.215:46199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||baronlongford.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "baronlongford.com"] [uri "/Hereditaments.html"] [unique_id "auNyGagtGeHMB0Gkf1TVewAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-25 00:00:52
UTC ·
(7 months ago)
Forum/form spam
Web Spam
🇺🇸
webgobe
2026-03-20 13:36:31
UTC ·
(7 months ago)
jow-Joomla User : try to access forms...
Hacking
2026-03-18 21:36:15
UTC ·
(7 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-36.88.218.46.215.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇧🇪
voormedia
2026-02-09 05:09:15
UTC ·
(9 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇩🇪
MusicLibrary
2026-02-08 02:43:20
UTC ·
(9 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇦🇺
MAGIC
2026-01-29 01:09:10
UTC ·
(9 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2026-01-26 09:10:34
UTC ·
(9 months ago)
Forum/form spam
Web Spam
🇪🇸
10dencehispahard SL
2026-01-16 06:21:00
UTC ·
(9 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
webgobe
2026-01-11 00:03:36
UTC ·
(9 months ago)
jow-Joomla User : try to access forms...
Hacking
🇦🇺
oncord
2026-01-09 16:57:12
UTC ·
(10 months ago)
Form spam
Web Spam
2026-01-05 17:00:17
UTC ·
(10 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-00.88.218.46.215.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-01-05 02:48:20
UTC ·
(10 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
