2026-11-15 14:04:01
UTC ·
(4 hours ago)
WEB attack
Brute-Force
🇺🇸
TPI-Abuse
2026-11-11 16:22:53
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:22:49.433692 2026] [security2:error] [pid 2521:tid 2521] [client 194.99.25.134:48759] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:22:49.433692 2026] [security2:error] [pid 2521:tid 2521] [client 194.99.25.134:48759] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/plaintext/productos/aparatos/agitadorrotativodefrascosrotatorhdovan.html"] [unique_id "avSWWS-ctVXKycP-Np5FBAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:57:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:57:25.030546 2026] [security2:error] [pid 14011:tid 14011] [client 194.99.25.134:55433] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:57:25.030546 2026] [security2:error] [pid 14011:tid 14011] [client 194.99.25.134:55433] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||trasimeno.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "trasimeno.ws"] [uri "/santuario_mongiovino_cappella_della_Resurrezione_it.html"] [unique_id "avAdVTmAcg-la1Rk5zJD3AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 11:05:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:05:39.424549 2026] [security2:error] [pid 26736:tid 26736] [client 194.99.25.134:50539] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:05:39.424549 2026] [security2:error] [pid 26736:tid 26736] [client 194.99.25.134:50539] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2021/06/23/preview-june-22-2021-deregulation-of-the-texas-power-sector-arsenal-for-democracy-ep-385/"] [unique_id "aunAAwZjnKowQMOqKoqVtAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 05:05:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:05:23.594228 2026] [security2:error] [pid 32369:tid 32369] [client 194.99.25.134:52661] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:05:23.594228 2026] [security2:error] [pid 32369:tid 32369] [client 194.99.25.134:52661] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/in-life-enduring-pain-often-leads-to-the-sweetest-moments-matt-palmer-april-18-2011/"] [unique_id "auQlk4hdmBrwy7s3cbXO_gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 16:18:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:18:16.049882 2026] [security2:error] [pid 14446:tid 14514] [client 194.99.25.134:56459] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.25.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:18:16.049882 2026] [security2:error] [pid 14446:tid 14514] [client 194.99.25.134:56459] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||yucef.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yucef.com"] [uri "/resta.html"] [unique_id "auIgSJJXfWVumtWO-CcaaAAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-25 09:23:47
UTC ·
(3 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇬🇧
relianoid.com
2026-09-11 07:33:49
UTC ·
(2 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇺🇸
ThreatsIntelz
2026-08-27 22:15:54
UTC ·
(2 months ago)
SSL-VPN brute-force / password-guessing attempts against FortiGate SSLVPN. Observed source subnet 194.99.25.0/24 (owner: FINEGROUPSERVERS-LEASE); 2 attempts above threshold.
Brute-Force
SSH
🇨🇦
DRI
2026-07-29 15:59:21
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
2026-01-18 07:44:40
UTC ·
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.18 is noted in report timestamp
Hacking
Brute-Force
2026-01-05 02:46:16
UTC ·
(10 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇫🇷
masterguru
2025-12-23 11:09:34
UTC ·
(10 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 194.99.25.134 (US/United States/-): 1 in the last 3600 secs (0-197)
Hacking
2025-12-18 00:29:51
UTC ·
(10 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.18 is noted in report timestamp
Hacking
Brute-Force
2025-12-08 16:14:50
UTC ·
(11 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.08 is noted in report timestamp
Hacking
Brute-Force
