🇺🇸
TPI-Abuse
2026-10-21 21:12:59
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 185.168.29.22 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.29.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:12:54.184443 2026] [security2:error] [pid 27779:tid 27779] [client 185.168.29.22:31155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tedharris.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tedharris.com"] [uri "/evolution/"] [unique_id "atkq1pAVcfPkvYs8l078lQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 10:21:22
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.168.29.22 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.29.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:21:15.389917 2026] [security2:error] [pid 19978:tid 19978] [client 185.168.29.22:51963] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.stoneageartifacts.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stoneageartifacts.com"] [uri "/html/Artifact-Scrapers-Denticulates.html"] [unique_id "atiSG5H34qrVoZVoaY2jPwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 01:30:53
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.168.29.22 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.168.29.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:30:48.631390 2026] [security2:error] [pid 29265:tid 29265] [client 185.168.29.22:13293] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||socialstudiesforkids.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/articles/currentevents/unmannedmayflower2020-2.htm"] [unique_id "atgVyHSC5ZPE2XqTB_FPggAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mind5t0rm
2026-04-07 14:33:50
(6 months ago)
(WPLOGIN) WP Login Attack 185.168.29.22 (UA/Ukraine/-): 3 in the last 3600 secs; Ports: *; Direction ...
show more
(WPLOGIN) WP Login Attack 185.168.29.22 (UA/Ukraine/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 185.168.29.22 - - [07/Apr/2026:21:33:32 +0700] "GET /wp-login.php HTTP/2.0" 200 2527 "-" "Wget/1.21.4"
185.168.29.22 - - [07/Apr/2026:21:33:34 +0700] "POST /wp-login.php HTTP/2.0" 302 0 "https://www.zerowaterthailand.com/wp-login.php" "curl/7.88.1"
185.168.29.22 - - [07/Apr/2026:21:33:49 +0700] "GET /wp-login.php HTTP/2.0" 200 2514 "-" "curl/8.6.0"
show less
Port Scan
🇺🇸
oralunal
2026-04-05 16:22:37
(6 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇮🇹
alessio loto
2026-04-03 17:47:33
(6 months ago)
WAF Detection: Security_Scanner_Blocked (Abusive IP). AI Confirmed Attack Payload.
Bad Web Bot
🇨🇦
polycoda
2026-03-22 03:07:35
(6 months ago)
AutoBlock: 🔐 WordPress Login Brute Force (40X) (Non Decay-Based)
Brute-Force
Web App Attack
2026-03-13 16:13:45
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇬🇧
consul.to
2026-02-25 04:34:44
(7 months ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
VHosting
2026-02-24 22:45:07
(7 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-02-22 08:07:01
(7 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-02-20 13:20:42
(8 months ago)
Unauthorized access to webpage admin
Web App Attack
