2026-11-11 10:42:45
UTC ·
(2 days ago)
FortiWeb WAF: 24 attacks detected. Threat Score: 3546400. Types: Client Management(12), HTTP Protocol Constraints(12). Origin: Germany.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:02:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.201.136.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:02:28.277939 2026] [security2:error] [pid 4838:tid 4838] [client 185.201.136.208:41983] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.136.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:02:28.277939 2026] [security2:error] [pid 4838:tid 4838] [client 185.201.136.208:41983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||members.15tobefit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "members.15tobefit.com"] [uri "/elite-program-registration"] [unique_id "auWglIVpUwBm1UUWzZCKowAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 23:34:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.201.136.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:34:34.013391 2026] [security2:error] [pid 19854:tid 19854] [client 185.201.136.208:6133 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.136.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:34:34.013391 2026] [security2:error] [pid 19854:tid 19854] [client 185.201.136.208:61337] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||scadainthecloud.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "scadainthecloud.com"] [uri "/Unitronics-UniStream-REST.php"] [unique_id "auKGilEr6ylBnv4J30O73QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 21:26:08
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.201.136.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:26:02.883484 2026] [security2:error] [pid 4516:tid 4516] [client 185.201.136.208:57815] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.136.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:26:02.883484 2026] [security2:error] [pid 4516:tid 4516] [client 185.201.136.208:57815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cnphilos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cnphilos.com"] [uri "/chuck-sexton/"] [unique_id "auEW6iIMomLW7_SjuWUeuwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 22:41:47
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-09 16:51:01
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.201.136.208
2026-09-09T18:37:32+02:00 vpn Access-Reject 'Mtorres' station: 185.201.136.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<red ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.201.136.208
2026-09-09T18:37:32+02:00 vpn Access-Reject 'Mtorres' station: 185.201.136.208 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇧🇪
Saec
2026-07-15 08:18:01
UTC ·
(3 months ago)
Jarvis auto-ban: CF honeypot path /xmlrpc.php (1× on saec.me)
Port Scan
Web App Attack
