🇺🇸
TPI-Abuse
2026-10-20 17:50:49
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:50:45.431415 2026] [security2:error] [pid 31243:tid 31243] [client 185.94.34.251:9381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rahjx.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rahjx.net"] [uri "/amttap.htm"] [unique_id "atep9UJrepLc24tLJ14AdQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-11-09 17:35:03
(11 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-06-20 22:31:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 18:31:18.879729 2025] [security2:error] [pid 2937035:tid 2937035] [client 185.94.34.251:30421] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Osaki/pics/Thumbs.db"] [unique_id "aFXhNhWSX-lal2RyO4dEAwAAAAk"], referer: https://vitalitywebb.com/backstore/Osaki/pics/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-06-12 19:47:35
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-03-05 10:01:15
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 05:00:54.404037 2025] [security2:error] [pid 39172:tid 39172] [client 185.94.34.251:14437] [client 185.94.34.251] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Siento/Thumbs.db"] [unique_id "Z8gg1jEUDOQpNs6vMZJcwgAAAAE"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/Siento/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2024-12-05 08:01:04
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-12-01 08:03:13
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 03:03:08.713817 2024] [security2:error] [pid 3698855:tid 3698855] [client 185.94.34.251:31301] [client 185.94.34.251] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Laguna 3036/Thumbs.db"] [unique_id "Z0wYPFPg1EVwxCdegLp2iwAAAAk"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Laguna%203036/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MrDD
2024-10-21 16:02:33
(2 years ago)
Brute Force Attack on Cisco Web VPN
Brute-Force
🇨🇭
backslash
2024-10-14 10:40:07
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2024-10-10 01:20:09
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
2024-10-04 03:40:09
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
🇨🇦
wil.com
2024-09-23 17:59:04
(2 years ago)
GlobalProtect login attempts with user vacosta.
VPN IP
Brute-Force
🇺🇸
TPI-Abuse
2023-12-24 23:03:45
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 18:03:38.896436 2023] [security2:error] [pid 3605] [client 185.94.34.251:52263] [client 185.94.34.251] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Briarwood II/Stetson Bordeaux/Thumbs.db"] [unique_id "ZYi4yjRP9M_sz14krsm7GwAAAAE"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Briarwood%20II/Stetson%20Bordeaux/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2023-12-18 06:36:19
(2 years ago)
(apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 185.94.34.251 (S ...
show more
(apache-bow-document) Failed apache-bow-scanners trigger with match [redacted] from 185.94.34.251 (SC/Seychelles/-)
show less
Hacking
🇨🇭
backslash
2023-10-06 08:45:27
(3 years ago)
honeypot
Bad Web Bot