🇺🇸
TPI-Abuse
2026-11-08 16:17:04
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:17:00.967608 2026] [security2:error] [pid 6316:tid 6316] [client 185.94.35.99:46709] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:17:00.967608 2026] [security2:error] [pid 6316:tid 6316] [client 185.94.35.99:46709] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tulsatvmemories.com"] [uri "/gb040701.html"] [unique_id "avCgfORI_2ZifNEiEU7lxgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 17:21:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 12:20:57.472469 2026] [security2:error] [pid 15047:tid 15047] [client 185.94.35.99:39295] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 12:20:57.472469 2026] [security2:error] [pid 15047:tid 15047] [client 185.94.35.99:39295] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/03/02/irresponsible-lending-pressure/"] [unique_id "au9d-TFNQ2IvJFn6SUNGjwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 22:35:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:35:02.907658 2026] [security2:error] [pid 31155:tid 31155] [client 185.94.35.99:27817] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:35:02.907658 2026] [security2:error] [pid 31155:tid 31155] [client 185.94.35.99:27817] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||proprocessor.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "proprocessor.com"] [uri "/"] [unique_id "auJ4lkgdVqtC5dphnPsetwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-09-10 16:30:01
UTC ·
(1 month ago)
2026/09/10 16:25:32 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 22:00:20
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 18:00:16.594523 2025] [security2:error] [pid 31503:tid 31503] [client 185.94.35.99:60053] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 18:00:16.594523 2025] [security2:error] [pid 31503:tid 31503] [client 185.94.35.99:60053] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Signature Series/Signature Fabrics/Thumbs.db"] [unique_id "aLyu8MVGZyGhfRNSTVXdtQAAABE"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Lift%20Chairs/Signature%20Series/Signature%20Fabrics/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-07-04 03:54:12
UTC ·
(1 year ago)
Bad Web Bot
🇺🇸
TPI-Abuse
2024-11-05 00:35:10
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 04 19:35:03.527647 2024] [security2:error] [pid 3680881:tid 3680881] [client 185.94.35.99:44677] ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 04 19:35:03.527647 2024] [security2:error] [pid 3680881:tid 3680881] [client 185.94.35.99:44677] [client 185.94.35.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Lift Chairs/Signature Series/Thumbs.db"] [unique_id "ZyloN4LLZAJJGWjvfuqkiAAAAAA"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Lift%20Chairs/Signature%20Series/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
wil.com
2024-09-24 03:17:38
UTC ·
(2 years ago)
GlobalProtect login attempts with user bgray.
VPN IP
Brute-Force
🇦🇺
MAGIC
2024-07-11 07:07:40
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2024-05-29 08:00:37
UTC ·
(2 years ago)
Web App Attack
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-05-28 04:52:12
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 28 00:52:08.947224 2024] [security2:error] [pid 4664] [client 185.94.35.99:44225] [client 185.94 ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 28 00:52:08.947224 2024] [security2:error] [pid 4664] [client 185.94.35.99:44225] [client 185.94.35.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portalvasco.com|F|2"] [data ".lacasadelarcerojo.wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portalvasco.com"] [uri "/blog/2009/09/dieciocho-personas-pierden-la-vida-en-la-carretera-durante-este-fin-de-semana/www.lacasadelarcerojo.wordpress.com"] [unique_id "ZlVi-PCHkrxY24SK9I-m4gAAAAc"], referer: https://portalvasco.com/blog/2009/09/dieciocho-personas-pierden-la-vida-en-la-carretera-durante-este-fin-de-semana/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-05-23 04:05:02
UTC ·
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2024-05-14 12:49:40
UTC ·
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
🇬🇧
Steve
2024-04-29 11:12:19
UTC ·
(2 years ago)
Excessive crawling - not obeying robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2024-04-14 12:33:12
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 08:33:07.561403 2024] [security2:error] [pid 9235] [client 185.94.35.99:20755] [client 185.94 ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.35.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 08:33:07.561403 2024] [security2:error] [pid 9235] [client 185.94.35.99:20755] [client 185.94.35.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Churchill II Recliner/Churchill II/Double Fudge/originals/Thumbs.db"] [unique_id "ZhvNA8vyJ0XZd9i-Hgh8TQAAABc"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Churchill%20II%20Recliner/Churchill%20II/Double%20Fudge/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack
