🇺🇸
TPI-Abuse
2026-11-07 02:57:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 21:57:08.633963 2026] [security2:error] [pid 22724:tid 22724] [client 193.163.89.208:63153] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 21:57:08.633963 2026] [security2:error] [pid 22724:tid 22724] [client 193.163.89.208:63153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/stats/statistic225.html"] [unique_id "au6ThI-mH8zHVgJcugJPCAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 08:40:29
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:40:22.765988 2026] [security2:error] [pid 15366:tid 15428] [client 193.163.89.208:38309] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 03:40:22.765988 2026] [security2:error] [pid 15366:tid 15428] [client 193.163.89.208:38309] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.woadwellness.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.woadwellness.com"] [uri "/about addiction therapy.html"] [unique_id "aumd9sm9HURHJ1eZVUfpwAAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 14:27:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:27:17.742411 2026] [security2:error] [pid 30666:tid 30666] [client 193.163.89.208:26443] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:27:17.742411 2026] [security2:error] [pid 30666:tid 30666] [client 193.163.89.208:26443] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/Onward-Anchorages/Onward-Anchorages.html"] [unique_id "auX6xY78Ka9gaHdJM6WdxAAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 01:31:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:31:32.253477 2026] [security2:error] [pid 19640:tid 19640] [client 193.163.89.208:24565] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.163.89.208 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:31:32.253477 2026] [security2:error] [pid 19640:tid 19640] [client 193.163.89.208:24565] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mydobdate.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mydobdate.com"] [uri "/"] [unique_id "auFQdHoRklT1F92SapB69wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
NetGuard
2026-10-02 15:26:24
UTC ·
(1 month ago)
#honeypot #netguard247 #ciscoasa
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-10-02T15:22:03.694+00:00
Attacker IP: 193.163.89.208 | Port: N/A | Country: United States
Honeypot: ciscoasa | Attack: unknown
Activity: 1 h ...
show more
#honeypot #netguard247 #ciscoasa
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-10-02T15:22:03.694+00:00
Attacker IP: 193.163.89.208 | Port: N/A | Country: United States
Honeypot: ciscoasa | Attack: unknown
Activity: 1 hit between 2026-10-02T15:22:03.694+00:00 and 2026-10-02T15:22:03.694+00:00 (6h window 2026-10-02T12:00:00.000Z)
Source: NetGuard 24/7 (netguard24-7.com) | PhantomGrid Defense
show less
Web App Attack
🇨🇿
Countryman
2026-10-02 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇪🇸
raiolanetworks.com
2026-09-29 12:00:00
UTC ·
(1 month ago)
Honeypot detection: Cisco ASA exploit attempt. 2 events observed. Reported automatically from a honeypot sensor.
Hacking
🇸🇪
OnTheEdge
2026-09-28 14:18:58
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇭
backslash
2026-05-18 14:36:02
UTC ·
(5 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
HandyTreff.de
2026-04-17 13:21:05
UTC ·
(6 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -52.155 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1781.6
Web App Attack
Bad Web Bot
🇨🇭
backslash
2026-04-17 02:03:00
UTC ·
(6 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇷🇺
sms.ru
2024-09-23 12:25:05
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇵🇱
TI
2023-10-28 10:25:49
UTC ·
(3 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
