🇩🇪
tall1oN
2026-11-12 15:40:32
UTC ·
(1 day ago)
88.148.85.85 - - [12/Nov/2026:16:40:30 +0100] "HEAD /wp-admin/ HTTP/2.0" 200 0 "http://diamondliferp.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "diamondliferp.cc"
88.148.85. ...
show more
88.148.85.85 - - [12/Nov/2026:16:40:30 +0100] "HEAD /wp-admin/ HTTP/2.0" 200 0 "http://diamondliferp.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "diamondliferp.cc"
88.148.85.85 - - [12/Nov/2026:16:40:32 +0100] "HEAD /wp-login.php HTTP/2.0" 200 0 "http://diamondliferp.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "diamondliferp.cc"
...
show less
Web App Attack
Port Scan
Hacking
🇨🇭
Origon
2026-11-09 02:16:29
UTC ·
(4 days ago)
http-crawl-non_statics - IP: 88.148.85.85 - time="2026-11-09T03:16:29+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-crawl-non_statics by ip 88.148.85.85 (ES/29119) : 4h ban on Ip 88.148.85.85" ...
show more
http-crawl-non_statics - IP: 88.148.85.85 - time="2026-11-09T03:16:29+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-crawl-non_statics by ip 88.148.85.85 (ES/29119) : 4h ban on Ip 88.148.85.85" module=db
show less
Bad Web Bot
🇫🇷
LRob
2026-11-06 21:21:38
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | method: GET | path: /en/blog/wordpress/comparatif-des-8-plugins-de-cache-gratuits-et-populaires-pour-wordpress-quel-est-le-plus-performant/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /en/blog/wordpress/comparatif-des-8-plugins-de-cache-gratuits-et-populaires-pour-wordpress-quel-est-le-plus-performant/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 16:43:48
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:43:42.434747 2026] [security2:error] [pid 23761:tid 23761] [client 88.148.85.85:52837] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:43:42.434747 2026] [security2:error] [pid 23761:tid 23761] [client 88.148.85.85:52837] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/03/21/omalley-in-iowa-echoes-bernie-sanders/"] [unique_id "au4DvrrPTrRuKcN1_LpAagAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 13:37:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 09:37:07.066565 2026] [security2:error] [pid 23924:tid 24005] [client 88.148.85.85:56095] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 09:37:07.066565 2026] [security2:error] [pid 23924:tid 24005] [client 88.148.85.85:56095] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pflagabq.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pflagabq.org"] [uri "/news/2014.html"] [unique_id "auXvA6nsK2smpWLECZMnzgAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 22:17:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:17:47.581868 2026] [security2:error] [pid 20678:tid 20678] [client 88.148.85.85:11993] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:17:47.581868 2026] [security2:error] [pid 20678:tid 20678] [client 88.148.85.85:11993] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thomasgardner.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thomasgardner.com"] [uri "/the-3-pillars-of-my-campaign/"] [unique_id "auEjC1DpaPael-cXCmfzfQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 18:25:55
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:25:49.837522 2026] [security2:error] [pid 26881:tid 26907] [client 88.148.85.85:30971] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:25:49.837522 2026] [security2:error] [pid 26881:tid 26907] [client 88.148.85.85:30971] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||okorganicgardening.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "okorganicgardening.org"] [uri "/event/tour-of-providence-farms-in-edmond-ok/"] [unique_id "at5JrVG4Zqi0PMVIePXU_gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 15:54:17
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 11:54:09.952489 2026] [security2:error] [pid 20569:tid 20594] [client 88.148.85.85:58801] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 88.148.85.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 11:54:09.952489 2026] [security2:error] [pid 20569:tid 20594] [client 88.148.85.85:58801] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.aafm.us|F|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aafm.us"] [uri "/www.GAFM.com"] [unique_id "atuDIRGpR2oKKMWnptAsWgAAAFQ"], referer: https://www.aafm.us/fintech.html
show less
Brute-Force
Bad Web Bot
Web App Attack
