🇺🇸
TPI-Abuse
2026-11-09 06:11:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:11:21.352191 2026] [security2:error] [pid 14514:tid 14514] [client 192.101.66.183:42115] ...
show more
(mod_security) mod_security (id:210350) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:11:21.352191 2026] [security2:error] [pid 14514:tid 14514] [client 192.101.66.183:42115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.byles.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.byles.net"] [uri "/ink-review/2018-5-3-ink-review-montblanc-petit-prince-red-fox/"] [unique_id "avFkCXb0bohh797l4PjidQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:22:56
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:22:50.688450 2026] [security2:error] [pid 32621:tid 32651] [client 192.101.66.183:58843] ...
show more
(mod_security) mod_security (id:210350) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:22:50.688450 2026] [security2:error] [pid 32621:tid 32651] [client 192.101.66.183:58843] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/dfoetorsq3489763"] [unique_id "au_rClIjW2lnK5pG0gAsqgAAAZM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 01:48:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:48:37.726222 2026] [security2:error] [pid 8313:tid 8313] [client 192.101.66.183:17209] M ...
show more
(mod_security) mod_security (id:210350) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:48:37.726222 2026] [security2:error] [pid 8313:tid 8313] [client 192.101.66.183:17209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.portfolio.rnance.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "portfolio.rnance.com"] [uri "/2ded_03.shtml"] [unique_id "auFUdaaHVC_QHvoQpKbUkAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 14:34:11
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:34:07.838496 2026] [security2:error] [pid 5734:tid 5734] [client 192.101.66.183:13357] M ...
show more
(mod_security) mod_security (id:225170) triggered by 192.101.66.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:34:07.838496 2026] [security2:error] [pid 5734:tid 5734] [client 192.101.66.183:13357] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||astrology7.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "astrology7.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atYqX19E6cN83gnefCwr8gAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Jochen Pretli
2026-10-05 04:41:56
UTC ·
(1 month ago)
connection to honeypot
Email Spam
Port Scan
🇨🇿
lp
2026-09-14 00:22:01
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 192.101.66.183
2026-09-14T01:09:27+02:00 vpn Access-Reject 'abeam_thanach' station: 192.101.66.183 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ' ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 192.101.66.183
2026-09-14T01:09:27+02:00 vpn Access-Reject 'abeam_thanach' station: 192.101.66.183 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-13 03:22:44
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 192.101.66.183
2026-09-13T05:11:14+02:00 vpn Access-Reject 'tatiana.martins' station: 192.101.66.183 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 192.101.66.183
2026-09-13T05:11:14+02:00 vpn Access-Reject 'tatiana.martins' station: 192.101.66.183 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇬🇧
Steve
2024-02-01 13:17:51
UTC ·
(2 years ago)
Registration form abuse
Brute-Force
Web App Attack
