🇺🇸
TPI-Abuse
2026-11-09 15:47:17
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:47:13.393536 2026] [security2:error] [pid 13147:tid 13147] [client 185.61.222.191:48735] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:47:13.393536 2026] [security2:error] [pid 13147:tid 13147] [client 185.61.222.191:48735] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2022/03/28/mar-28-2022-synthetic-dye-arsenal-for-democracy-ep-419/"] [unique_id "avHrAfjCs7PLR_dRo1wV6gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 01:10:14
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:10:08.166184 2026] [security2:error] [pid 5429:tid 5429] [client 185.61.222.191:22883] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:10:08.166184 2026] [security2:error] [pid 5429:tid 5429] [client 185.61.222.191:22883] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fruitinthedesert.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fruitinthedesert.com"] [uri "/Fruits/the-faith-and-patriotism-of-john-wayne/"] [unique_id "avEdcKX3zpCjntRCOP9DmQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-06 01:02:51
UTC ·
(3 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:59:33
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:59:28.288838 2026] [security2:error] [pid 2785:tid 2785] [client 185.61.222.191:48943] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:59:28.288838 2026] [security2:error] [pid 2785:tid 2785] [client 185.61.222.191:48943] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cosplayculture.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cosplayculture.com"] [uri "/2017/10/09/the-life-of-a-professional-cosplayer-vampy-bit-me/"] [unique_id "aulAANQ3QbYEscFZuT6XGgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:27:54
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:27:51.122693 2026] [security2:error] [pid 19726:tid 19726] [client 185.61.222.191:52705] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:27:51.122693 2026] [security2:error] [pid 19726:tid 19726] [client 185.61.222.191:52705] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||glslightingandcontrols.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "glslightingandcontrols.com"] [uri "/privacy-policy.html"] [unique_id "auk4l9qkpGeIe_OMTK_rHgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 14:32:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 10:32:04.793385 2026] [security2:error] [pid 30816:tid 30834] [client 185.61.222.191:51607] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.222.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 10:32:04.793385 2026] [security2:error] [pid 30816:tid 30834] [client 185.61.222.191:51607] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cityofmiddleton.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cityofmiddleton.org"] [uri "/INDUSTRY.aspx"] [unique_id "attv5HdKAghik39EvtbfogAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
jank
2026-09-11 02:36:28
UTC ·
(1 month ago)
pop3 login attempt
Brute-Force
🇨🇿
lp
2026-03-12 07:41:13
UTC ·
(7 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.222.191
2026-03-12T08:16:44+01:00 vpn Access-Reject 'rockytop' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.222.191
2026-03-12T08:16:44+01:00 vpn Access-Reject 'rockytop' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-03-10 07:40:18
UTC ·
(7 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.222.191
2026-03-10T07:08:27+01:00 vpn Access-Reject 'pallas' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.222.191
2026-03-10T07:08:27+01:00 vpn Access-Reject 'pallas' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-03-07 06:01:35
UTC ·
(8 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 185.61.222.191
2026-03-07T06:25:05+01:00 vpn Access-Reject 'jack69' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 185.61.222.191
2026-03-07T06:25:05+01:00 vpn Access-Reject 'jack69' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-03-07T06:25:46+01:00 vpn Access-Reject 'pipi' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-19 22:46:03
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2025-07-29 07:13:22
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
nowyouknow
2025-07-17 16:56:53
UTC ·
(1 year ago)
(From [email protected] ) We have hacked your website https://hechtchiro.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability ...
show more
(From [email protected] ) We have hacked your website https://hechtchiro.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server.
What does this mean?
We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://hechtchiro.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques that we used in the past to de
show less
Phishing
Web Spam
🇨🇿
lp
2025-07-02 13:51:02
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.222.191
2025-07-02T15:17:44+02:00 vpn Access-Reject 'd.walker' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.61.222.191
2025-07-02T15:17:44+02:00 vpn Access-Reject 'd.walker' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-06-30 03:23:02
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 3 attempts were recorded from 185.61.222.191
2025-06-30T04:21:55+02:00 vpn Access-Reject 'griffith' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 185.61.222.191
2025-06-30T04:21:55+02:00 vpn Access-Reject 'griffith' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-30T04:24:33+02:00 vpn Access-Reject 'ray' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-06-30T04:26:01+02:00 vpn Access-Reject 'rios' station: 185.61.222.191 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
