🇺🇸
TPI-Abuse
2026-11-06 15:31:20
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:31:16.214670 2026] [security2:error] [pid 27808:tid 27808] [client 89.19.34.72:58649] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:31:16.214670 2026] [security2:error] [pid 27808:tid 27808] [client 89.19.34.72:58649] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fundingworkingcapital.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fundingworkingcapital.com"] [uri "/working-capital-definition/"] [unique_id "au3yxD6CIPfCfb-CnammtQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 20:56:01
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:55:57.488932 2026] [security2:error] [pid 18036:tid 18036] [client 89.19.34.72:37633] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:55:57.488932 2026] [security2:error] [pid 18036:tid 18036] [client 89.19.34.72:37633] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/1290"] [unique_id "auub3cFcZqmSH7PFvzPKGwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 00:37:58
UTC ·
(3 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 02:35:22
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 21:35:17.772602 2026] [security2:error] [pid 636:tid 636] [client 89.19.34.72:23399] ModSecuri ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 21:35:17.772602 2026] [security2:error] [pid 636:tid 636] [client 89.19.34.72:23399] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vrbsroma.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vrbsroma.com"] [uri "/article2.html"] [unique_id "auf25fvJhkfVvnGjlyYW8wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 16:38:48
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 12:38:45.245216 2026] [security2:error] [pid 3752:tid 3752] [client 89.19.34.72:19289] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.34.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 12:38:45.245216 2026] [security2:error] [pid 3752:tid 3752] [client 89.19.34.72:19289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joeordie.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joeordie.com"] [uri "/2016/12/28/my-smartwatch/"] [unique_id "auDTlVmL5gT6rf58frrM2wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
vtchost.com
2026-10-16 09:15:04
UTC ·
(3 weeks ago)
portscan 80/443 on honeypot system
...
Port Scan
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-09 01:22:26
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇭
backslash
2026-08-25 20:03:00
UTC ·
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇦
DRI
2026-08-24 04:27:55
UTC ·
(2 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
ANTI SCANNER
2026-05-14 23:03:28
UTC ·
(5 months ago)
Scanner : /xmlrpc.php
Web Spam
🇮🇩
securejdprop
2026-02-21 16:20:39
UTC ·
(8 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
🇪🇸
Michael McCarthy
2026-02-16 03:13:46
UTC ·
(8 months ago)
Web Spam
2026-02-11 01:57:52
UTC ·
(8 months ago)
wordpress exploit scan
Web App Attack
