🇺🇸
TPI-Abuse
2026-11-13 16:48:12
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:48:08.101431 2026] [security2:error] [pid 554:tid 554] [client 186.65.84.149:37628] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:48:08.101431 2026] [security2:error] [pid 554:tid 554] [client 186.65.84.149:37628] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alltrashremoval.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alltrashremoval.com"] [uri "/"] [unique_id "avc_SBH6kIHIOwTQX-d4TAAAABI"], referer: https://sitelike.org/similar/junkmytrash.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 06:52:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:52:46.726482 2026] [security2:error] [pid 27773:tid 27773] [client 186.65.84.149:59986] M ...
show more
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:52:46.726482 2026] [security2:error] [pid 27773:tid 27773] [client 186.65.84.149:59986] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kinesiologiaenmovimiento.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kinesiologiaenmovimiento.com"] [uri "/"] [unique_id "auWQPurIZrRZlM_7ME2jEAAAACA"], referer: https://five.co.in/redirect.php?ref_host=squishablehq.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 03:49:26
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:49:19.753276 2026] [security2:error] [pid 20064:tid 20074] [client 186.65.84.149:39774] M ...
show more
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 23:49:19.753276 2026] [security2:error] [pid 20064:tid 20074] [client 186.65.84.149:39774] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||darkestmoonart.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "darkestmoonart.com"] [uri "/"] [unique_id "auLCP2nCkOd1itXBH5dN9wAAAIg"], referer: https://highseoonline.info/dir/outreach-link-building-50659
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 20:01:24
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:01:20.129370 2026] [security2:error] [pid 19489:tid 19797] [client 186.65.84.149:59518] M ...
show more
(mod_security) mod_security (id:210350) triggered by 186.65.84.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:01:20.129370 2026] [security2:error] [pid 19489:tid 19797] [client 186.65.84.149:59518] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||eatdrinkgroove.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "eatdrinkgroove.com"] [uri "/"] [unique_id "at-xkJI7nlnjQ1aRfUe6oQAAAZQ"], referer: https://five.co.in/redirect.php?ref_host=tucsonkollel.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-01 15:34:15
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-17 14:22:12
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-16 18:42:26
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
🇺🇸
kosada.com
2026-08-25 15:31:23
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
xmission.com
2026-08-15 02:37:41
UTC ·
(2 months ago)
Blocked by UFW (TCP on 22)
Source port: 52582
TTL: 56
Packet length: 60
TOS: 0x00
This report (for 186.65.84.149) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
SSH
Brute-Force
🇧🇷
noconex
2026-08-15 02:10:21
UTC ·
(2 months ago)
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 186.65.84.149
Port Scan
Brute-Force
SSH
2026-08-15 00:04:30
UTC ·
(2 months ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
🇩🇪
_ArminS_
2026-08-14 00:12:13
UTC ·
(3 months ago)
Bad SSHAUTH 2026.08.14 02:12:13
blocked until 2026.08.17 02:12:13
by HoneyPot DE_State of Berlin01
SSH
Brute-Force
Hacking
2026-08-06 02:24:11
UTC ·
(3 months ago)
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
🇺🇸
NetVexor
2026-08-05 23:12:47
UTC ·
(3 months ago)
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan
Hacking
Brute-Force
🇺🇸
MPL
2026-08-05 21:23:47
UTC ·
(3 months ago)
tcp ports: 22,23 (8 or more attempts)
Port Scan
