🇺🇸
TPI-Abuse
2026-11-14 10:30:31
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:30:26.597764 2026] [security2:error] [pid 29447:tid 29447] [client 185.61.217.233:27057] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:30:26.597764 2026] [security2:error] [pid 29447:tid 29447] [client 185.61.217.233:27057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/08/24/citizenship-why-we-should-keep-the-14th-amendment/"] [unique_id "avg4QkDSjbiRVgc6LvCmWgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 03:42:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:42:26.895953 2026] [security2:error] [pid 22956:tid 22956] [client 185.61.217.233:29283] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:42:26.895953 2026] [security2:error] [pid 22956:tid 22956] [client 185.61.217.233:29283] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cyclingboardgames.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cyclingboardgames.net"] [uri "/g_girobigjim.htm"] [unique_id "avaHIlBDYMJ3P1vwVEB6lQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 11:51:46
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:51:40.159293 2026] [security2:error] [pid 8662:tid 8666] [client 185.61.217.233:32641] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:51:40.159293 2026] [security2:error] [pid 8662:tid 8666] [client 185.61.217.233:32641] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.annybelle.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.annybelle.org"] [uri "/disclaimer.html"] [unique_id "avRWzGhe0XwiyInTeufrDwAAAYE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-08 04:00:14
UTC ·
(1 week ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-06 16:36:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:36:44.334286 2026] [security2:error] [pid 23682:tid 23682] [client 185.61.217.233:14745] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:36:44.334286 2026] [security2:error] [pid 23682:tid 23682] [client 185.61.217.233:14745] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2014/08/brooke-burke-charvet-bikini-pictures/"] [unique_id "au4CHOIjsrNog64J8Z8_GAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-03 01:44:34
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2026-11-01 04:03:00
UTC ·
(2 weeks ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-19 02:52:56
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 22:52:52.020552 2026] [security2:error] [pid 17662:tid 17662] [client 185.61.217.233:36435] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 22:52:52.020552 2026] [security2:error] [pid 17662:tid 17662] [client 185.61.217.233:36435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fernfield.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fernfield.com"] [uri "/"] [unique_id "aoUahCEulKdtOtXNM75qtAAAAAU"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-18 06:44:24
UTC ·
(3 months ago)
HTTP flood against /retreat-corp on Apache webserver
Brute-Force
🇷🇺
sms.ru
2026-06-24 15:07:19
UTC ·
(4 months ago)
/wp-admin/
Web App Attack
🇩🇪
stinpriza
2026-06-17 20:08:23
UTC ·
(4 months ago)
Web App Attack
Web App Attack
🇫🇷
solution.it
2026-06-11 03:37:24
UTC ·
(5 months ago)
[Thu Jun 11 05:37:23.433367 2026] [php7:error] [pid 2798931:tid 2798931] [client 185.61.217.233:38301] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
Web App Attack
🇩🇪
stinpriza
2026-03-25 15:22:52
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-08-31 18:11:43
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2024-10-11 21:31:41
UTC ·
(2 years ago)
apache-wordpress-login
Brute-Force
Web App Attack
