🇺🇸
TPI-Abuse
2026-11-12 17:42:49
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:42:41.505211 2026] [security2:error] [pid 8026:tid 8026] [client 146.19.78.102:50677] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:42:41.505211 2026] [security2:error] [pid 8026:tid 8026] [client 146.19.78.102:50677] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.directoryofcats.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.directoryofcats.com"] [uri "/asian_golden_cat.htm"] [unique_id "avX6kURJWcOnn_VWWzLAfwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:20:27
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:20:22.820400 2026] [security2:error] [pid 14728:tid 14728] [client 146.19.78.102:44473] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:20:22.820400 2026] [security2:error] [pid 14728:tid 14728] [client 146.19.78.102:44473] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.huboon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.huboon.com"] [uri "/devo800817.html"] [unique_id "avRrlnBd7wELL3KWgdRZ-wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:49:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:49:28.598969 2026] [security2:error] [pid 1046:tid 1046] [client 146.19.78.102:43241] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:49:28.598969 2026] [security2:error] [pid 1046:tid 1046] [client 146.19.78.102:43241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "auu2eKZ6avb9Y4310CYbwAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-31 02:18:55
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:00:17
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:00:11.854965 2026] [security2:error] [pid 22617:tid 22617] [client 146.19.78.102:10283] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:00:11.854965 2026] [security2:error] [pid 22617:tid 22617] [client 146.19.78.102:10283] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/05/07/homs-falls-end-of-syria-war-near/"] [unique_id "auJGOwuqKV1LlbQsfP7B7gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-12 06:21:16
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 146.19.78.102
2026-09-12T07:18:25+02:00 vpn Access-Reject '9302298' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 146.19.78.102
2026-09-12T07:18:25+02:00 vpn Access-Reject '9302298' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-12T07:19:44+02:00 vpn Access-Reject '9304065' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-03-22 20:07:44
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 16:07:39.972457 2026] [security2:error] [pid 15594:tid 15594] [client 146.19.78.102:31081] M ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 16:07:39.972457 2026] [security2:error] [pid 15594:tid 15594] [client 146.19.78.102:31081] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||arriagarealestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arriagarealestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acBMC0NonENO__mv80VDqAAAAA4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 15:46:16
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 11:46:05.009149 2026] [security2:error] [pid 11305:tid 11305] [client 146.19.78.102:45409] M ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.78.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 11:46:05.009149 2026] [security2:error] [pid 11305:tid 11305] [client 146.19.78.102:45409] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rhythmandbluescompany.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rhythmandbluescompany.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ab69PQSIbA_uw2teLU9dAwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-03-06 02:31:29
UTC ·
(8 months ago)
Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:06
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇿
lp
2025-11-07 17:51:12
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.78.102
2025-11-07T18:30:34+01:00 vpn Access-Reject 'cisco' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.78.102
2025-11-07T18:30:34+01:00 vpn Access-Reject 'cisco' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-10-30 08:52:28
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 146.19.78.102
2025-10-30T08:46:20+01:00 vpn Access-Reject 'epson' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 146.19.78.102
2025-10-30T08:46:20+01:00 vpn Access-Reject 'epson' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-10-30T08:46:39+01:00 vpn Access-Reject 'kamand' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-10-28 08:50:54
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.78.102
2025-10-28T09:18:02+01:00 vpn Access-Reject 'salope' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.78.102
2025-10-28T09:18:02+01:00 vpn Access-Reject 'salope' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-10-20 16:51:25
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.78.102
2025-10-20T17:23:37+02:00 vpn Access-Reject 'administrator' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<r ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 146.19.78.102
2025-10-20T17:23:37+02:00 vpn Access-Reject 'administrator' station: 146.19.78.102 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
