🇺🇸
TPI-Abuse
2025-09-12 14:52:04
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 10:51:59.451246 2025] [security2:error] [pid 693039:tid 693039] [client 185.88.101.225:29763] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||myllc.email|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "myllc.email"] [uri "/"] [unique_id "aMQzjwESUWsAdgd6AvnRzQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 00:49:10
(9 months ago)
(mod_security) mod_security (id:210350) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 20:49:07.103197 2025] [security2:error] [pid 16996:tid 16996] [client 185.88.101.225:16433] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||surrenderhouse.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "surrenderhouse.com"] [uri "/about.html"] [unique_id "aMIcg1-dTT93P5No37CmkgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-21 22:39:21
(10 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇭
backslash
2025-05-07 14:10:19
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-03-05 09:08:48
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 04:08:41.784386 2025] [security2:error] [pid 4123383:tid 4123383] [client 185.88.101.225:18359] [client 185.88.101.225] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/graphics/Thumbs.db"] [unique_id "Z8gUma5MUqspS4M6VnLcKQAAAAo"], referer: https://vitalitywebb.com/backstore/graphics/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-09 12:37:45
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 185.88.101.225 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 07:37:40.163525 2024] [security2:error] [pid 1146006:tid 1146006] [client 185.88.101.225:43713] [client 185.88.101.225] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Bindu/Thumbs.db"] [unique_id "Zy9XlCw4wYF1I7ahC-UmfgAAAAU"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/Bindu/
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-08-06 08:15:31
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
Vegascosmetics
2024-06-23 05:00:46
(2 years ago)
Potential Dangerous Requests Sucker
Bad Web Bot
🇦🇺
MAGIC
2024-05-21 07:07:06
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2024-04-11 18:10:20
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2024-03-30 02:12:00
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇭
backslash
2023-01-13 07:38:44
(3 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇭
backslash
2022-01-02 23:30:31
(4 years ago)
honeypot, robots.txt
Bad Web Bot
🇨🇭
backslash
2021-11-30 23:13:30
(4 years ago)
honeypot, robots.txt
Bad Web Bot
🇹🇼
kk_it_man
2021-08-31 09:03:22
(4 years ago)
ET WEB_SERVER MYSQL SELECT CONCAT SQL Injection Attempt
ET WEB_SERVER Possible MySQL SQLi Attempt ...
show more
ET WEB_SERVER MYSQL SELECT CONCAT SQL Injection Attempt
ET WEB_SERVER Possible MySQL SQLi Attempt Information Schema Access
ET WEB_SERVER Possible SQL Injection Attempt SELECT FROM
ET WEB_SERVER Possible SQL Injection Attempt UNION SELECT
show less
Port Scan