🇺🇸
TPI-Abuse
2026-11-11 10:24:22
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:24:16.999939 2026] [security2:error] [pid 342:tid 342] [client 185.88.103.62:33335] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:24:16.999939 2026] [security2:error] [pid 342:tid 342] [client 185.88.103.62:33335] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/01/16/north-carolina-go-rich-go-anywhere-else/"] [unique_id "avRCUMnvgrbAeO8eb47qRAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 00:00:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:00:00.149212 2026] [security2:error] [pid 3248:tid 3248] [client 185.88.103.62:31257] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:00:00.149212 2026] [security2:error] [pid 3248:tid 3248] [client 185.88.103.62:31257] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||miles2go.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "miles2go.net"] [uri "/miles2go_2006/updates/april06/april21.htm"] [unique_id "avOwADw8wjXUQ2bkmywZBAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:05:47
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:05:39.908203 2026] [security2:error] [pid 4176:tid 4176] [client 185.88.103.62:61283] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:05:39.908203 2026] [security2:error] [pid 4176:tid 4176] [client 185.88.103.62:61283] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sharawi-gum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sharawi-gum.com"] [uri "/10-super-berry-smoothie-recipes/"] [unique_id "avK0M4OYxmKz_bmj4GtzUAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:07:16
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:07:12.725660 2026] [security2:error] [pid 25341:tid 25341] [client 185.88.103.62:45193] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:07:12.725660 2026] [security2:error] [pid 25341:tid 25341] [client 185.88.103.62:45193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.disio.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.disio.com"] [uri "/bronymate-was-kostet-2/angetraute-sollte-komik-sehen-weiters-man-sollte/"] [unique_id "avF_MIi9A_7BOUHHGvpiYAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:09:56
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:09:50.864734 2026] [security2:error] [pid 19347:tid 19347] [client 185.88.103.62:48509] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:09:50.864734 2026] [security2:error] [pid 19347:tid 19347] [client 185.88.103.62:48509] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avFxvlCJ6fE4l00A2f7omgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 20:06:19
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:06:13.889679 2026] [security2:error] [pid 18476:tid 18476] [client 185.88.103.62:29255] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.88.103.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:06:13.889679 2026] [security2:error] [pid 18476:tid 18476] [client 185.88.103.62:29255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||clubfansite.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "clubfansite.com"] [uri "/lucasaaronlukebenward/"] [unique_id "avDWNUEWjTM3i6akmRu1ZQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-10-06 17:30:22
UTC ·
(1 month ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
Ilop
2026-09-09 00:30:02
UTC ·
(2 months ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-08-27 04:30:25
UTC ·
(2 months ago)
[hp-100] 15 unsolicited packets to honeypot ports 8000 (OCI DShield sensor)
Port Scan
🇫🇷
Tilellit.PRO
2026-05-22 06:28:59
UTC ·
(5 months ago)
Fail2Ban banned 185.88.103.62 for security violations in jail wp-armour. Log: 2026/05/22 06:28:58 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.88.103.62 | Target: wplogin" , client: 185.88.103.62, server: [REDACTED], request: ...
show more
Fail2Ban banned 185.88.103.62 for security violations in jail wp-armour. Log: 2026/05/22 06:28:58 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.88.103.62 | Target: wplogin" , client: 185.88.103.62, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-05-18 17:32:59
UTC ·
(5 months ago)
Fail2Ban banned 185.88.103.62 for security violations in jail wp-armour. Log: 2026/05/18 17:32:58 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.88.103.62 | Target: wplogin" , client: 185.88.103.62, server: [REDACTED], request: ...
show more
Fail2Ban banned 185.88.103.62 for security violations in jail wp-armour. Log: 2026/05/18 17:32:58 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.88.103.62 | Target: wplogin" , client: 185.88.103.62, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-05-17 06:11:03
UTC ·
(5 months ago)
Fail2Ban banned 185.88.103.62 for security violations in jail wp-armour. Log: 2026/05/17 06:11:03 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.88.103.62 | Target: wplogin" , client: 185.88.103.62, server: [REDACTED], request: ...
show more
Fail2Ban banned 185.88.103.62 for security violations in jail wp-armour. Log: 2026/05/17 06:11:03 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.88.103.62 | Target: wplogin" , client: 185.88.103.62, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇹🇷
rtbh.com.tr
2025-12-25 20:10:39
UTC ·
(10 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷
SpaceHost-Server
2025-12-24 23:36:11
UTC ·
(10 months ago)
Brute-Force
Web App Attack
