🇺🇸
TPI-Abuse
2026-11-12 04:49:59
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:49:54.116110 2026] [security2:error] [pid 24979:tid 24979] [client 193.142.36.35:51123] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:49:54.116110 2026] [security2:error] [pid 24979:tid 24979] [client 193.142.36.35:51123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.circleofsound.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.circleofsound.org"] [uri "/global-contacts/europe/austria/"] [unique_id "avVFclCErg_Y-EVttB9JaQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 16:05:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:05:17.407450 2026] [security2:error] [pid 27868:tid 27868] [client 193.142.36.35:56581] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:05:17.407450 2026] [security2:error] [pid 27868:tid 27868] [client 193.142.36.35:56581] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.natchezbicycle.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.natchezbicycle.com"] [uri "/bellesonbikes.htm"] [unique_id "avSSPf2UFAI73YfVeOuXgwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-02 01:41:54
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-11-01 01:14:42
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:17:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.142.36.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:17:52.810479 2026] [security2:error] [pid 11999:tid 11999] [client 193.142.36.35:34865] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.142.36.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:17:52.810479 2026] [security2:error] [pid 11999:tid 11999] [client 193.142.36.35:34865] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/jek/af4.html"] [unique_id "auWyQD36Eru2WV6f-7YrBAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-29 05:57:02
UTC ·
(2 weeks ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇦🇺
oncord
2026-08-10 01:05:37
UTC ·
(3 months ago)
Form spam
Web Spam
🇯🇵
VXG-NET
2026-08-07 16:23:54
UTC ·
(3 months ago)
port=80, indicator_type=code-execution
Hacking
🇦🇺
oncord
2026-07-20 14:06:30
UTC ·
(3 months ago)
Form spam
Web Spam
🇬🇧
Oakley
2026-07-20 01:33:37
UTC ·
(3 months ago)
(mod_security) mod_security (id:900178) triggered by 193.142.36.35 (US/United States/-): 5 in the last 900 secs
Web App Attack
Hacking
🇫🇷
Tilellit.PRO
2026-05-19 02:58:46
UTC ·
(5 months ago)
Fail2Ban banned 193.142.36.35 for security violations in jail wp-armour. Log: 2026/05/19 02:58:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.142.36.35 | Target: wplogin" , client: 193.142.36.35, server: [REDACTED], request: ...
show more
Fail2Ban banned 193.142.36.35 for security violations in jail wp-armour. Log: 2026/05/19 02:58:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 193.142.36.35 | Target: wplogin" , client: 193.142.36.35, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
ph
2026-05-15 15:10:32
UTC ·
(5 months ago)
Bad web bot attempting to run wp-json on non-WP site
Hacking
Bad Web Bot
Web App Attack
2025-10-12 14:28:16
UTC ·
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.12 is noted in report timestamp
Hacking
Brute-Force
2025-10-09 06:45:48
UTC ·
(1 year ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.09 is noted in report timestamp
Hacking
Brute-Force
🇨🇿
lp
2025-08-18 15:21:18
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.142.36.35
2025-08-18T17:03:15+02:00 vpn Access-Reject 'natalie' station: 193.142.36.35 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.142.36.35
2025-08-18T17:03:15+02:00 vpn Access-Reject 'natalie' station: 193.142.36.35 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
