🇺🇸
TPI-Abuse
2026-11-14 16:15:39
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:15:32.997932 2026] [security2:error] [pid 30752:tid 30752] [client 185.94.35.173:51825] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:15:32.997932 2026] [security2:error] [pid 30752:tid 30752] [client 185.94.35.173:51825] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flatchestedmama.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flatchestedmama.com"] [uri "/time-based-works/100-hours-in-a-life-jacket"] [unique_id "aviJJK3N4dXbGCYYArfdNgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 13:34:47
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:34:40.907302 2026] [security2:error] [pid 3930:tid 3930] [client 185.94.35.173:45271] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:34:40.907302 2026] [security2:error] [pid 3930:tid 3930] [client 185.94.35.173:45271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||enfiestate.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "enfiestate.com"] [uri "/env.php"] [unique_id "avhjcN2m49sC3rn4AJz3HwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-12 04:00:14
UTC ·
(3 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-09 15:26:15
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:26:08.777664 2026] [security2:error] [pid 12826:tid 12856] [client 185.94.35.173:61951] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:26:08.777664 2026] [security2:error] [pid 12826:tid 12856] [client 185.94.35.173:61951] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/panimusn3691449"] [unique_id "avHmEFyE1m0uFoRl5T-yVAAAAYE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:18:44
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:18:35.253663 2026] [security2:error] [pid 32570:tid 32570] [client 185.94.35.173:46933] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:18:35.253663 2026] [security2:error] [pid 32570:tid 32570] [client 185.94.35.173:46933] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||marxistphilosophy.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "marxistphilosophy.org"] [uri "/maozedong/mx3/046.htm"] [unique_id "avHIK6-nS84mAREpiyjySwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 18:10:19
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:10:15.144940 2026] [security2:error] [pid 3930:tid 3930] [client 185.94.35.173:31799] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 13:10:15.144940 2026] [security2:error] [pid 3930:tid 3930] [client 185.94.35.173:31799] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||guldunyayayinlari.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "guldunyayayinlari.com"] [uri "/2020/09/836/trackback/"] [unique_id "avC7B47Tc_xNXuJypBZkpQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 18:55:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:54:52.466449 2026] [security2:error] [pid 7462:tid 7462] [client 185.94.35.173:60787] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:54:52.466449 2026] [security2:error] [pid 7462:tid 7462] [client 185.94.35.173:60787] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||naghmehfarahmand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "naghmehfarahmand.com"] [uri "/contact.html"] [unique_id "at5QfHNHHj0J6Tqa0wRfMAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-01 14:49:17
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 13:00:53
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 13:00:53
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇹🇷
rtbh.com.tr
2026-03-09 20:11:58
UTC ·
(8 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2026-03-08 20:11:59
UTC ·
(8 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2026-03-07 16:51:39
UTC ·
(8 months ago)
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force
Port Scan
SSH
