🇺🇸
TPI-Abuse
2026-11-15 00:48:58
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:48:52.225819 2026] [security2:error] [pid 13177:tid 13177] [client 185.61.220.151:9703] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:48:52.225819 2026] [security2:error] [pid 13177:tid 13177] [client 185.61.220.151:9703] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||salinabible.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "salinabible.org"] [uri "/Messages/Misc/download.php"] [unique_id "avkBdGmAOWmPbAj_MITPUQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 13:15:01
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:14:57.306301 2026] [security2:error] [pid 31645:tid 31645] [client 185.61.220.151:9819] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:14:57.306301 2026] [security2:error] [pid 31645:tid 31645] [client 185.61.220.151:9819] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/news/watch-the-new-trailer-for-blumhouses-fantasy-island-in-cinemas-february-13/"] [unique_id "avcNUZw4IS7FM24u2QvC9gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 03:48:37
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:48:32.572911 2026] [security2:error] [pid 4795:tid 4795] [client 185.61.220.151:29607] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:48:32.572911 2026] [security2:error] [pid 4795:tid 4795] [client 185.61.220.151:29607] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/recipes/main-dish/grandma-sukis-thanksgiving-stuffed-turkey/feed/"] [unique_id "avaIkAfWRtuOELOx2hS-rAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 07:18:53
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:18:47.233179 2026] [security2:error] [pid 7485:tid 7485] [client 185.61.220.151:42587] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:18:47.233179 2026] [security2:error] [pid 7485:tid 7485] [client 185.61.220.151:42587] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.rimworld.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rimworld.com"] [uri "/brx/mapbooks/mapbooks.html"] [unique_id "avVoV8vafaQtd0y_idGD8wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:32:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:32:45.765876 2026] [security2:error] [pid 21813:tid 21918] [client 185.61.220.151:40605] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:32:45.765876 2026] [security2:error] [pid 21813:tid 21918] [client 185.61.220.151:40605] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.chelseyrae.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chelseyrae.com"] [uri "/blondes-can-cook-too/roasted-pumpkin-seeds/"] [unique_id "auuyjV2cqUeq_gQ6zWMMPAAAAc8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:55:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:55:20.056995 2026] [security2:error] [pid 32257:tid 32257] [client 185.61.220.151:29889] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:55:20.056995 2026] [security2:error] [pid 32257:tid 32257] [client 185.61.220.151:29889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/Stressless-Chair/Stressless-Metro-High-Back-Paloma-Black-Leather-Recliner-Chair-Ottoman.htm"] [unique_id "aumTaEg1hzb0wda39b4wdQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 07:53:43
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 03:53:38.615262 2026] [security2:error] [pid 22054:tid 22054] [client 185.61.220.151:16705] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.220.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 03:53:38.615262 2026] [security2:error] [pid 22054:tid 22054] [client 185.61.220.151:16705] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/pedstore/d/DossadaofAddlestone.html"] [unique_id "at8HAgPBbaAPPbd4SiIXAgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-25 01:10:30
UTC ·
(3 weeks ago)
Web App Attack
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-13 21:32:11
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-13 19:16:23
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 19:16:23
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
lp
2026-09-10 10:51:08
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.220.151
2026-09-10T12:38:22+02:00 vpn Access-Reject 'd41514' station: 185.61.220.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.220.151
2026-09-10T12:38:22+02:00 vpn Access-Reject 'd41514' station: 185.61.220.151 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-16 10:35:41
UTC ·
(4 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 18:23:33
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
