🇺🇸
Zandro
2026-11-13 20:00:14
UTC ·
(1 day ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-13 02:03:54
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:03:50.227708 2026] [security2:error] [pid 22971:tid 22971] [client 185.61.216.151:36075] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:03:50.227708 2026] [security2:error] [pid 22971:tid 22971] [client 185.61.216.151:36075] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bkspeck.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bkspeck.com"] [uri "/lineage/d0001/g0000037.html"] [unique_id "avZwBhX1BRzKO8MFwOpNwAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:52:06
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:52:02.665501 2026] [security2:error] [pid 21324:tid 21324] [client 185.61.216.151:27305] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:52:02.665501 2026] [security2:error] [pid 21324:tid 21324] [client 185.61.216.151:27305] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||guardmagic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guardmagic.com"] [uri "/01-engl/11e-solution/21e-fuelstorage-tank/11e-tank-monitoring-FSL-1.htm"] [unique_id "avKxAkFePXEkI3-_hZ91GwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:45:02
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:44:55.627774 2026] [security2:error] [pid 8449:tid 8469] [client 185.61.216.151:11909] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:44:55.627774 2026] [security2:error] [pid 8449:tid 8469] [client 185.61.216.151:11909] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/fastex/our-service-fastex-logistic-cargo/"] [unique_id "au_-Rzk0oKvL9dJRKI8RYwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-30 02:38:08
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 17:03:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:03:00.934028 2026] [security2:error] [pid 11084:tid 11084] [client 185.61.216.151:10079] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.216.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:03:00.934028 2026] [security2:error] [pid 11084:tid 11084] [client 185.61.216.151:10079] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jmichaelpope.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jmichaelpope.com"] [uri "/faqs/"] [unique_id "auN8RKuo8gTYoROG-UTKegAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 22:37:47
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 22:37:47
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
lp
2026-09-13 09:21:53
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 6 attempts were recorded from 185.61.216.151
2026-09-13T10:56:26+02:00 vpn Access-Reject 'Patcharin' station: 185.61.216.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<red ...
show more
Unauthorized VPN login attempts: 6 attempts were recorded from 185.61.216.151
2026-09-13T10:56:26+02:00 vpn Access-Reject 'Patcharin' station: 185.61.216.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T10:58:10+02:00 vpn Access-Reject 'Panita' station: 185.61.216.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T10:59:47+02:00 vpn Access-Reject 'Suthep' station: 185.61.216.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T11:01:19+02:00 vpn Access-Reject 'Jittiporn' station: 185.61.216.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-13T11:02:57+02:00 vpn Access-Reject 'Wiphawee' station: 185.61.216.151 auth-type: - realm: vse.cz n
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-12 03:21:54
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.216.151
2026-09-12T04:12:03+02:00 vpn Access-Reject 'Nihal@2003' station: 185.61.216.151 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<r ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.216.151
2026-09-12T04:12:03+02:00 vpn Access-Reject 'Nihal@2003' station: 185.61.216.151 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-09 16:50:40
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.216.151
2026-09-09T18:23:47+02:00 vpn Access-Reject 'test' station: 185.61.216.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.216.151
2026-09-09T18:23:47+02:00 vpn Access-Reject 'test' station: 185.61.216.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-08 12:13:30
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 13:06:14
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-04-09 10:05:07
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
