🇺🇸
TPI-Abuse
2026-11-11 10:12:41
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:12:35.139329 2026] [security2:error] [pid 23456:tid 23456] [client 185.94.34.100:51965] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:12:35.139329 2026] [security2:error] [pid 23456:tid 23456] [client 185.94.34.100:51965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/02/18/the-technicality-blocking-obamas-immigration-order/"] [unique_id "avQ_kzZXdzgl9aNA1Q6ZnQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:37:58
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:37:51.004029 2026] [security2:error] [pid 5168:tid 5168] [client 185.94.34.100:17341] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:37:51.004029 2026] [security2:error] [pid 5168:tid 5168] [client 185.94.34.100:17341] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/thirsty-and-sweating-before-we-even-began-staci-diesel-april-18-2016/"] [unique_id "avHozsiiXV0OAVyMzHNvlwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 00:56:24
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:41:03
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:41:00.049078 2026] [security2:error] [pid 8570:tid 8570] [client 185.94.34.100:14071] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:41:00.049078 2026] [security2:error] [pid 8570:tid 8570] [client 185.94.34.100:14071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.infojeffreysbay.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.infojeffreysbay.com"] [uri "/sitemap.htm"] [unique_id "auSCTMqPMZTyWTtQVGLu7wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
tjs
2026-05-12 13:15:00
UTC ·
(6 months ago)
web attack
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-20 02:12:29
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:12:23.223908 2026] [security2:error] [pid 5378:tid 5378] [client 185.94.34.100:61901] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 19 22:12:23.223908 2026] [security2:error] [pid 5378:tid 5378] [client 185.94.34.100:61901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||handymanhall.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "handymanhall.com"] [uri "/"] [unique_id "abytB5qgBLulrkUWt3-EkAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-18 10:22:12
UTC ·
(7 months ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 02:33:37
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 21:33:29.166404 2026] [security2:error] [pid 21165:tid 21165] [client 185.94.34.100:12889] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 21:33:29.166404 2026] [security2:error] [pid 21165:tid 21165] [client 185.94.34.100:12889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aschmidtconsulting.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aschmidtconsulting.com"] [uri "/"] [unique_id "aZ0N-X8iv4MrQZ0hcXnlfQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 17:47:22
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 13:47:15.795447 2025] [security2:error] [pid 27896:tid 27896] [client 185.94.34.100:9965] Mo ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 13:47:15.795447 2025] [security2:error] [pid 27896:tid 27896] [client 185.94.34.100:9965] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/HumanTouch/pics/Thumbs.db"] [unique_id "aLxzo8190fWHX6TI82F_kgAAAAE"], referer: https://vitalitywebb.com/backstore/HumanTouch/pics/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-18 05:43:03
UTC ·
(1 year ago)
sql injection
Web App Attack
2024-12-17 19:02:24
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_MODSEC
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-11-10 07:29:37
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 10 02:29:30.535333 2024] [security2:error] [pid 1925777:tid 1925777] [client 185.94.34.100:5017 ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.100 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 10 02:29:30.535333 2024] [security2:error] [pid 1925777:tid 1925777] [client 185.94.34.100:50171] [client 185.94.34.100] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Thumbs.db"] [unique_id "ZzBg2t5Vmp4W9Vpk6Z4_pQAAAAw"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Lift%20Chairs/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-11-05 10:40:13
UTC ·
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇷🇺
sms.ru
2024-09-24 07:15:04
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
2024-08-09 11:44:37
UTC ·
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
