🇺🇸
TPI-Abuse
2026-11-06 08:38:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:38:49.627001 2026] [security2:error] [pid 29407:tid 29407] [client 88.218.46.92:13271] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:38:49.627001 2026] [security2:error] [pid 29407:tid 29407] [client 88.218.46.92:13271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.n3fjp.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.n3fjp.com"] [uri "/faq.html"] [unique_id "au2SGXYNdValFLcZoo11jwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 17:01:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:01:26.166008 2026] [security2:error] [pid 19237:tid 19237] [client 88.218.46.92:12711] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:01:26.166008 2026] [security2:error] [pid 19237:tid 19237] [client 88.218.46.92:12711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.anamericanabroad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.anamericanabroad.com"] [uri "/how-to-beat-jet-lag-on-long-haul-flights/"] [unique_id "auIqZlv5gUv_qJ3Pey19HQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 11:12:34
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:12:29.720406 2026] [security2:error] [pid 13793:tid 13793] [client 88.218.46.92:44859] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 07:12:29.720406 2026] [security2:error] [pid 13793:tid 13793] [client 88.218.46.92:44859] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||djbadger.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "djbadger.com"] [uri "/badgerjournal248.htm"] [unique_id "auHYnWIQNhX8Xy_4PfCosAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 22:09:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 18:09:25.683236 2026] [security2:error] [pid 23951:tid 23951] [client 88.218.46.92:11751] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 18:09:25.683236 2026] [security2:error] [pid 23951:tid 23951] [client 88.218.46.92:11751] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/erin-elaine-photography/"] [unique_id "at5-FQXC1z3ZHs_JntMmfAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 12:28:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:28:14.301494 2026] [security2:error] [pid 19480:tid 19480] [client 88.218.46.92:43061] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.46.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:28:14.301494 2026] [security2:error] [pid 19480:tid 19480] [client 88.218.46.92:43061] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.muslera.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.muslera.com"] [uri "/primera/somaoi.htm"] [unique_id "atykXmdnqvFMtRvfhHFJPQAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-12 07:52:04
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 88.218.46.92
2026-09-12T09:01:32+02:00 vpn Access-Reject 'awagner' station: 88.218.46.92 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 88.218.46.92
2026-09-12T09:01:32+02:00 vpn Access-Reject 'awagner' station: 88.218.46.92 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-10 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2026-01-28 19:56:44
UTC ·
(9 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇺🇸
fbarela
2025-11-12 21:00:36
UTC ·
(11 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇨🇭
backslash
2025-11-11 17:01:04
UTC ·
(11 months ago)
block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE
Bad Web Bot
🇲🇽
licjperezl
2025-06-10 19:13:07
UTC ·
(1 year ago)
Ataque de diccionario o DDoS en nuestros servicios en linea
Brute-Force
🇮🇳
wizard1411
2025-05-31 11:28:49
UTC ·
(1 year ago)
DDoS and brute force activity detected
Brute-Force
SSH
🇮🇳
wizard1411
2025-05-31 11:28:49
UTC ·
(1 year ago)
DDoS and brute force activity detected
Brute-Force
SSH
🇮🇳
wizard1411
2025-05-31 11:28:49
UTC ·
(1 year ago)
DDoS and brute force activity detected
Brute-Force
SSH
