🇺🇸
TPI-Abuse
2026-11-10 12:52:44
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:52:38.230043 2026] [security2:error] [pid 12732:tid 12732] [client 185.201.138.179:5803 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:52:38.230043 2026] [security2:error] [pid 12732:tid 12732] [client 185.201.138.179:58033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.sarahpeebles.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sarahpeebles.net"] [uri "/reviews/amber_rev.htm"] [unique_id "avMTlugAzH-nxljWSQnS6gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:20:20
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:20:13.004980 2026] [security2:error] [pid 11386:tid 11392] [client 185.201.138.179:5092 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:20:13.004980 2026] [security2:error] [pid 11386:tid 11392] [client 185.201.138.179:50925] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/lcontusedj1065465"] [unique_id "avLhzSxsrvWvP4yeLXscpgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-09 03:11:14
UTC ·
(2 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-08 19:23:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:23:03.524799 2026] [security2:error] [pid 14352:tid 14352] [client 185.201.138.179:2166 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:23:03.524799 2026] [security2:error] [pid 14352:tid 14352] [client 185.201.138.179:21669] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.achildsspace.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.achildsspace.com"] [uri "/day-care-reviews"] [unique_id "avDMF9QWOH3y3PejekSXQQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:08:15
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:08:12.492879 2026] [security2:error] [pid 28581:tid 28581] [client 185.201.138.179:6293 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:08:12.492879 2026] [security2:error] [pid 28581:tid 28581] [client 185.201.138.179:62937] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/todays-academy/dealing-with-the-young/dealing-with-the-young-in-dublin/"] [unique_id "avADvDFEB4TqGlVt9BEu6wAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 00:34:55
UTC ·
(4 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 09:39:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:39:20.061266 2026] [security2:error] [pid 10281:tid 10281] [client 185.201.138.179:4487 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:39:20.061266 2026] [security2:error] [pid 10281:tid 10281] [client 185.201.138.179:44871] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.capefearastro.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.capefearastro.org"] [uri "/asaw.htm"] [unique_id "auHCyDSCb9MK1O1sne7gwwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-10-25 03:34:17
UTC ·
(2 weeks ago)
WP Armour Plugin detection
Web Spam
Brute-Force
2026-10-21 14:34:50
UTC ·
(2 weeks ago)
Unauthorized access attempt to administration interfaces (wp-admin, phpMyAdmin, panel, etc). Automated scanning blocked by fail2ban.
Web App Attack
2026-08-26 17:53:59
UTC ·
(2 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
2026-08-25 05:08:54
UTC ·
(2 months ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-08-20 01:58:07
UTC ·
(2 months ago)
Brute force
Brute-Force
🇧🇪
Saec
2026-08-12 23:18:08
UTC ·
(2 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)
Port Scan
Web App Attack
2026-06-30 01:36:05
UTC ·
(4 months ago)
Unauthorized access attempt to administration interfaces (wp-admin, phpMyAdmin, panel, etc). Automated scanning blocked by fail2ban.
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 12:52:01
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 08:51:54.224368 2026] [security2:error] [pid 15399:tid 15399] [client 185.201.138.179:6352 ...
show more
(mod_security) mod_security (id:225170) triggered by 185.201.138.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 08:51:54.224368 2026] [security2:error] [pid 15399:tid 15399] [client 185.201.138.179:63525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ohnosound.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ohnosound.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiqvascZTAKwcF_pmqgvCAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
