🇺🇸
TPI-Abuse
2026-10-21 01:54:04
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:53:57.372960 2026] [security2:error] [pid 1970:tid 1970] [client 185.102.112.116:28947] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.judithcaldwell.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.judithcaldwell.com"] [uri "/news-information/"] [unique_id "atgbNbH4Ll_vEAkKQC-N2wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:38:02
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:37:52.350732 2026] [security2:error] [pid 19969:tid 19998] [client 185.102.112.116:34283] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||evolutionaryethics.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "evolutionaryethics.com"] [uri "/QuantumPhysics.html"] [unique_id "atDXMOFCPYb8bMVXL58MjAAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
Detmach
2026-05-28 06:39:05
(4 months ago)
Security attack detected. Multiple failed attempts from 185.102.112.116. IP banned for 1440 minutes ...
show more
Security attack detected. Multiple failed attempts from 185.102.112.116. IP banned for 1440 minutes at 28.05.2026 09:39:01. Failed attempts: 1
show less
Brute-Force
🇮🇹
VHosting
2026-02-09 23:10:04
(8 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇨🇦
SSH-Admin
2026-02-07 17:12:28
(8 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇨🇦
SSH-Admin
2025-12-27 13:45:08
(9 months ago)
Probing for Exploits
Exploited Host
Web App Attack
🇪🇸
10dencehispahard SL
2025-12-03 07:51:49
(10 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
2025-05-28 02:25:28
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-02-19 17:48:46
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 19 12:48:43.049673 2025] [security2:error] [pid 8237:tid 8237] [client 185.102.112.116:30109] [client 185.102.112.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "club1069media.com.club1069radio.com"] [uri "/.env"] [unique_id "Z7YZe6OLlTbsL3yzDaVvygAAAAE"], referer: https://tasamm.com/about/ccc58.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-15 07:56:01
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 185.102.112.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 15 03:55:54.280357 2024] [security2:error] [pid 4613:tid 4613] [client 185.102.112.116:17423] [client 185.102.112.116] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||walkerweb.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "walkerweb.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Zw4gCo_mkxqLDX_89jMHrwAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-21 13:25:04
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
