🇺🇸
TPI-Abuse
2026-11-14 08:23:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:23:35.470030 2026] [security2:error] [pid 10022:tid 10022] [client 185.88.102.252:63827] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:23:35.470030 2026] [security2:error] [pid 10022:tid 10022] [client 185.88.102.252:63827] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.lamariposagallery.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lamariposagallery.com"] [uri "/index.php/cPath/25_40"] [unique_id "avgahz0sF0Xk2mpsE0eGKQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-12 20:00:14
UTC ·
(2 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇫🇷
Sklurk
2026-11-07 00:06:57
UTC ·
(1 week ago)
Web App Attack
Web App Attack
2026-11-06 20:56:37
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-01 13:05:47
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:05:40.941898 2026] [security2:error] [pid 17536:tid 17536] [client 185.88.102.252:39379] ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 08:05:40.941898 2026] [security2:error] [pid 17536:tid 17536] [client 185.88.102.252:39379] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "auc5JLekNOAnSwatI07uFQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-15 00:22:12
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 185.88.102.252
2026-09-15T02:11:41+02:00 vpn Access-Reject 'eswari' station: 185.88.102.252 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 185.88.102.252
2026-09-15T02:11:41+02:00 vpn Access-Reject 'eswari' station: 185.88.102.252 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 00:22:11
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 4 attempts were recorded from 185.88.102.252
2026-09-11T01:26:14+02:00 vpn Access-Reject 'anur' station: 185.88.102.252 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 4 attempts were recorded from 185.88.102.252
2026-09-11T01:26:14+02:00 vpn Access-Reject 'anur' station: 185.88.102.252 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-11T01:28:07+02:00 vpn Access-Reject 'sgencer' station: 185.88.102.252 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-11T01:29:57+02:00 vpn Access-Reject 'ebayrak' station: 185.88.102.252 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-11T01:31:55+02:00 vpn Access-Reject 'e.bayrak' station: 185.88.102.252 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇦
DRI
2026-07-31 11:47:18
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-29 17:55:58
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-26 16:34:03
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 06:00:58
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:00:49.204414 2026] [security2:error] [pid 24536:tid 24536] [client 185.88.102.252:40599] ...
show more
(mod_security) mod_security (id:225170) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:00:49.204414 2026] [security2:error] [pid 24536:tid 24536] [client 185.88.102.252:40599] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kirbyimc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kirbyimc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amL_kUPYP1FTRJABbFnGwwAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 02:39:14
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 21:39:11.441646 2026] [security2:error] [pid 12775:tid 12775] [client 185.88.102.252:40033] ...
show more
(mod_security) mod_security (id:225170) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 21:39:11.441646 2026] [security2:error] [pid 12775:tid 12775] [client 185.88.102.252:40033] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abilityimprinting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abilityimprinting.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXLfT6bSWhmk7CgLeFoltAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 21:31:16
UTC ·
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 16:31:08.422567 2026] [security2:error] [pid 28005:tid 28005] [client 185.88.102.252:15621] ...
show more
(mod_security) mod_security (id:225170) triggered by 185.88.102.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 16:31:08.422567 2026] [security2:error] [pid 28005:tid 28005] [client 185.88.102.252:15621] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||versallis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "versallis.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXKXHJlNz7T5TXRC_vA4ZQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
