🇺🇸
TPI-Abuse
2026-11-08 08:10:18
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:10:16.169376 2026] [security2:error] [pid 1253:tid 1253] [client 88.148.85.200:21397] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:10:16.169376 2026] [security2:error] [pid 1253:tid 1253] [client 88.148.85.200:21397] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/instrumental/0000009f3a12ed931.html"] [unique_id "avAuaNLdGUVlvaqmBxzLDAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 00:36:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:36:50.726214 2026] [security2:error] [pid 11793:tid 11793] [client 88.148.85.200:11511] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:36:50.726214 2026] [security2:error] [pid 11793:tid 11793] [client 88.148.85.200:11511] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ruthbalser.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ruthbalser.org"] [uri "/issues/"] [unique_id "auPmouCYBKvRnNLdBkSm4AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 20:37:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:37:39.975529 2026] [security2:error] [pid 14634:tid 14634] [client 88.148.85.200:11873] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 16:37:39.975529 2026] [security2:error] [pid 14634:tid 14634] [client 88.148.85.200:11873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/mona/sh1e.html"] [unique_id "at-6ExKjpFdwCiFvHNwg-gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 08:17:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:17:35.562782 2026] [security2:error] [pid 10303:tid 10303] [client 88.148.85.200:56933] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:17:35.562782 2026] [security2:error] [pid 10303:tid 10303] [client 88.148.85.200:56933] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/2ca48e8438511bba86256c0800536075"] [unique_id "at8Mn5m2Z8ziz6q3d0shygAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 21:59:02
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 17:58:54.247960 2026] [security2:error] [pid 15170:tid 15170] [client 88.148.85.200:38057] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 17:58:54.247960 2026] [security2:error] [pid 15170:tid 15170] [client 88.148.85.200:38057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||matt-bechtel.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "matt-bechtel.com"] [uri "/writing/broken/"] [unique_id "atqHHhzB-pKZQ0Qg64a48gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-12 03:43:41
UTC ·
(3 weeks ago)
SSH tarpit (endlessh) connection from 88.148.85.200
Brute-Force
SSH
2026-10-09 04:07:59
UTC ·
(4 weeks ago)
SSH tarpit (endlessh) connection from 88.148.85.200
Brute-Force
SSH
2026-10-07 20:26:24
UTC ·
(1 month ago)
SSH tarpit (endlessh) connection from 88.148.85.200
Brute-Force
SSH
2026-06-02 22:46:13
UTC ·
(5 months ago)
Failed Wordpress Logins
Web App Attack
2026-05-31 05:46:23
UTC ·
(5 months ago)
Failed Wordpress Logins
Web App Attack
2026-05-29 20:46:21
UTC ·
(5 months ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
lostswordfish.com
2026-05-28 15:10:09
UTC ·
(5 months ago)
Wordfence waf block on ncrsol
Web App Attack
2026-05-28 10:58:12
UTC ·
(5 months ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
octageeks.com
2026-05-26 04:06:58
UTC ·
(5 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
FeG Deutschland
2026-05-24 01:39:09
UTC ·
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
