🇺🇸
TPI-Abuse
2025-12-29 13:26:05
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 185.94.32.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.32.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 08:26:00.230137 2025] [security2:error] [pid 26096:tid 26096] [client 185.94.32.184:54991] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kiddocommunication.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kiddocommunication.com"] [uri "/"] [unique_id "aVKBaKJ738wjS_K6xnlFXgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 02:06:03
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 185.94.32.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.32.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 21:05:56.736455 2025] [security2:error] [pid 16166:tid 16182] [client 185.94.32.184:49647] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.willmanlawfirm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.willmanlawfirm.com"] [uri "/"] [unique_id "aS5JhHvtVYJyiW9Nfli7PQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
mypatricks
2025-08-31 06:55:34
(9 months ago)
185.94.32.184 | Port: 61268 | DNS: 185.94.32.184 2025-08-31T14:55:32+08:00 Europe/Helsinki | IPs res ...
show more
185.94.32.184 | Port: 61268 | DNS: 185.94.32.184 2025-08-31T14:55:32+08:00 Europe/Helsinki | IPs reserved list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1 Safari/605.1.15 HTTP/1.1 443 GET | URL: /shop/compare/?1756018453= | Ref: - | Country: FI/Finland/+02:00 IP City: Helsinki 977a9f6d687da455-ARN/Stockholm, Sweden 1 hits/0 secs Robots 2
show less
Web Spam
Blog Spam
Brute-Force
Exploited Host
Web App Attack
🇨🇭
backslash
2025-06-19 03:25:04
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
triple-web.net
2025-01-12 14:34:29
(1 year ago)
$f2bV_matches
Brute-Force
2025-01-11 16:00:31
(1 year ago)
Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2025-01-10 12:44:54
(1 year ago)
Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-12-31 10:53:36
(1 year ago)
Failed SMTP AUTH login from 185.94.32.184 (FI/Finland/-): 5 in the last 3600 secs
Hacking
Brute-Force
🇺🇸
octageeks.com
2024-12-31 05:07:27
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇬🇧
Hobby Bob
2024-12-23 14:32:42
(1 year ago)
Dec 23 14:32:42 mail postfix/smtps/smtpd[1208192]: warning: unknown[185.94.32.184]: SASL LOGIN authe ...
show more
Dec 23 14:32:42 mail postfix/smtps/smtpd[1208192]: warning: unknown[185.94.32.184]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Hacking
Brute-Force
🇨🇦
wil.com
2024-09-25 17:22:38
(1 year ago)
GlobalProtect login attempts with user khudson.
VPN IP
Brute-Force
2024-08-08 12:12:45
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
MAGIC
2024-06-10 06:03:42
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-05-24 05:43:28
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.94.32.184 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.32.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 24 01:43:23.783557 2024] [security2:error] [pid 17465] [client 185.94.32.184:30845] [client 185.94.32.184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Danbury II/Stetson Coffee/originals/Thumbs.db"] [unique_id "ZlAo-4v-IvL_Qq88MFqHlwAAABI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Danbury%20II/Danbury%20II/Stetson%20Coffee/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-05-17 05:00:07
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot