🇺🇸
TPI-Abuse
2026-10-23 14:21:32
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 10:21:27.550178 2026] [security2:error] [pid 22700:tid 22700] [client 146.19.44.42:62061] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wryemusings.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wryemusings.com"] [uri "/Must Train.html"] [unique_id "atttZ4Afz4C8cZaX7e7MSgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 12:02:29
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 08:02:22.997174 2026] [security2:error] [pid 26017:tid 26017] [client 146.19.44.42:16379] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||naplesdogcenter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "naplesdogcenter.com"] [uri "/blog.html"] [unique_id "atipzoua9Sw4k8gFM-wPbwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-05-03 23:31:56
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 05:41:54
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 01:41:47.626316 2026] [security2:error] [pid 1616:tid 1616] [client 146.19.44.42:53637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fitzmail.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fitzmail.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afBImwD_BDz4WDFt3jcItgAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 16:29:30
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.44.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 12:29:22.392929 2026] [security2:error] [pid 5275:tid 5374] [client 146.19.44.42:50131] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||power51.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "power51.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeuaYnI4OoV3iO-l2zd8pgAAAkM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-03-21 15:18:48
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇺🇸
myagent.site
2026-03-18 16:10:15
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇺🇸
myagent.site
2026-03-17 10:41:25
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
2025-11-17 03:02:46
(11 months ago)
Web attack
Bad Web Bot
Web App Attack
🇨🇿
lp
2024-11-20 07:27:14
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.44.42
2024-11-20T08:09:55+01:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.44.42
2024-11-20T08:09:55+01:00 vpn Access-Reject '714' station: 146.19.44.42 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
Yawning Angel
2024-08-27 21:17:28
(2 years ago)
logdesc=SSL VPN login fail user=camey remip=146.19.44.42 reason=sslvpn_login_permission_denied
Hacking
Brute-Force
🇺🇸
Yawning Angel
2024-08-20 07:50:34
(2 years ago)
logdesc=SSL VPN login fail user=astoria remip=146.19.44.42 reason=sslvpn_login_permission_denied
Hacking
Brute-Force
🇺🇸
Yawning Angel
2024-08-07 10:13:54
(2 years ago)
msg=SSL user failed to logged in logdesc=SSL VPN login fail user=ptaylor remip=146.19.44.42 group=N/ ...
show more
msg=SSL user failed to logged in logdesc=SSL VPN login fail user=ptaylor remip=146.19.44.42 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_permission_denied
show less
Hacking
Brute-Force
