🇺🇸
TPI-Abuse
2026-11-08 03:55:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:54:57.433991 2026] [security2:error] [pid 2592011:tid 2592066] [client 185.168.28.174:54 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:54:57.433991 2026] [security2:error] [pid 2592011:tid 2592066] [client 185.168.28.174:54563] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||financialcertified.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "financialcertified.com"] [uri "/financial-analyst-certification.html"] [unique_id "au_ykWxWN151FcB3icBBmQAAAZA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 17:57:14
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:57:07.749981 2026] [security2:error] [pid 12913:tid 12913] [client 185.168.28.174:39563] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:57:07.749981 2026] [security2:error] [pid 12913:tid 12913] [client 185.168.28.174:39563] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerielster.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerielster.com"] [uri "/2012/09/04/california-assembly-bill-488/"] [unique_id "auzDc7D_QwtJv0DYpdI8QAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 00:02:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:02:33.053976 2026] [security2:error] [pid 13554:tid 13554] [client 185.168.28.174:58351] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:02:33.053976 2026] [security2:error] [pid 13554:tid 13554] [client 185.168.28.174:58351] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gamepart.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gamepart.com"] [uri "/articles/html/_Video_Game_Music_and_www.mixposure.com.html"] [unique_id "auKNGah_uw8jEFAYIp7ygwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:50:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:50:17.615496 2026] [security2:error] [pid 31940:tid 31940] [client 185.168.28.174:9213] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.28.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:50:17.615496 2026] [security2:error] [pid 31940:tid 31940] [client 185.168.28.174:9213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.1st-advantage-arkansas-real-estate-school.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.1st-advantage-arkansas-real-estate-school.com"] [uri "/all-real-estate-courses/faqs/"] [unique_id "auJR-ZRchhfbVc7VB7hy7AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-10 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-09 13:50:00
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 185.168.28.174
2026-09-09T15:29:50+02:00 vpn Access-Reject 'dean' station: 185.168.28.174 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 185.168.28.174
2026-09-09T15:29:50+02:00 vpn Access-Reject 'dean' station: 185.168.28.174 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-09T15:31:18+02:00 vpn Access-Reject 'cdesando' station: 185.168.28.174 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-09T15:32:43+02:00 vpn Access-Reject 'mtilley' station: 185.168.28.174 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-09T15:34:07+02:00 vpn Access-Reject 'calbano' station: 185.168.28.174 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
2026-08-30 17:23:27
UTC ·
(2 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-08-25 07:15:40
UTC ·
(2 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-08-20 01:26:40
UTC ·
(2 months ago)
Brute force
Brute-Force
