🇺🇸
TPI-Abuse
2026-11-11 07:29:35
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:29:29.371675 2026] [security2:error] [pid 813:tid 813] [client 185.102.112.217:58595] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:29:29.371675 2026] [security2:error] [pid 813:tid 813] [client 185.102.112.217:58595] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/stad/sem.html"] [unique_id "avQZWXBGHkRuWTSZtiEv2QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:21:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:21:48.044264 2026] [security2:error] [pid 31124:tid 31124] [client 185.102.112.217:2097 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:21:48.044264 2026] [security2:error] [pid 31124:tid 31124] [client 185.102.112.217:20979] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.beirutbazar.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.beirutbazar.com"] [uri "/item/blackbird-slate-high-top-lbp-220000-usd-147/"] [unique_id "auWzLGEaNMIX8iyfkh3L8QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 09:31:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 05:31:06.193370 2026] [security2:error] [pid 32378:tid 32378] [client 185.102.112.217:5366 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 05:31:06.193370 2026] [security2:error] [pid 32378:tid 32378] [client 185.102.112.217:53661] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/graduation-york/"] [unique_id "at8d2pEAyYQZrlqrLVdNAQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 00:45:45
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 20:45:41.369030 2026] [security2:error] [pid 14455:tid 14455] [client 185.102.112.217:2397 ...
show more
(mod_security) mod_security (id:225170) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 20:45:41.369030 2026] [security2:error] [pid 14455:tid 14455] [client 185.102.112.217:23973] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||murpf.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "murpf.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag0ENQUH5gxJl4DjZ7dOqAAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-03 07:02:25
UTC ·
(9 months ago)
wordpress-trap
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 11:03:40
UTC ·
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 06:03:37.224057 2025] [security2:error] [pid 31679:tid 31679] [client 185.102.112.217:2490 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.102.112.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 06:03:37.224057 2025] [security2:error] [pid 31679:tid 31679] [client 185.102.112.217:24905] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.lasertherapyoc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lasertherapyoc.com"] [uri "/"] [unique_id "aSmBicJVQthmPPF7-msspQAAABE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-05-29 04:45:31
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-04-27 00:08:59
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-04-24 12:25:30
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇦
wil.com
2024-01-23 19:19:28
UTC ·
(2 years ago)
GlobalProtect login attempts with user fax.
VPN IP
Brute-Force
🇬🇧
Paul Smith
2023-02-07 02:16:33
UTC ·
(3 years ago)
Email Auth Brute force attack 1/1 in last day
Brute-Force
2022-03-19 22:30:00
UTC ·
(4 years ago)
Password Spary Attack
Brute-Force
Exploited Host
