🇨🇿
Countryman
2026-11-11 01:10:01
UTC ·
(23 hours ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-10 00:16:31
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:16:23.786650 2026] [security2:error] [pid 5607:tid 5607] [client 88.218.47.155:51363] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:16:23.786650 2026] [security2:error] [pid 5607:tid 5607] [client 88.218.47.155:51363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/homeworkto-help-or-not-to-help/"] [unique_id "avJiV9Y1WDvKJWyyhljdSwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-09 01:10:01
UTC ·
(2 days ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-11-08 17:52:51
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:52:44.122513 2026] [security2:error] [pid 2510:tid 2510] [client 88.218.47.155:56439] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:52:44.122513 2026] [security2:error] [pid 2510:tid 2510] [client 88.218.47.155:56439] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.redlinechemical.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.redlinechemical.com"] [uri "/html/red-line_chemical_corporation_.html"] [unique_id "avC27F2Fe8qqWbNlrxF4RgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-11-08 03:17:31
UTC ·
(3 days ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 88.218.47.155
2026-11-08T04:07:55+0100 vpn Access-Reject station: 88.218.47.155
Brute-Force
Web App Attack
🇺🇸
donarev419
2026-11-08 02:21:41
UTC ·
(3 days ago)
Connection to port 2001 with data transfer.
Data preview:
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-11-05 04:54:31
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 23:54:26.202859 2026] [security2:error] [pid 52264:tid 52368] [client 88.218.47.155:48889] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 23:54:26.202859 2026] [security2:error] [pid 52264:tid 52368] [client 88.218.47.155:48889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanacademyofprojectmanagement.com"] [uri "/European-Qualifications-Framework.html"] [unique_id "auwMAp1rnHvJ3NzUdcASLQAAAdY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-11-03 01:10:02
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-11-01 01:10:02
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
NetGuard
2026-10-31 11:13:21
UTC ·
(1 week ago)
#honeypot #netguard247 #ciscoasa
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-10-31T11:13:21.099+00:00
Attacker IP: 88.218.47.155 | Port: N/A | Country: United States
Honeypot: ciscoasa | Attack: unknown
Source: NetGua ...
show more
#honeypot #netguard247 #ciscoasa
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-10-31T11:13:21.099+00:00
Attacker IP: 88.218.47.155 | Port: N/A | Country: United States
Honeypot: ciscoasa | Attack: unknown
Source: NetGuard 24/7 (netguard24-7.com) | PhantomGrid Defense
show less
Web App Attack
🇨🇿
lp
2026-10-30 09:48:52
UTC ·
(1 week ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 88.218.47.155
2026-10-30T10:30:30+0100 vpn Access-Reject station: 88.218.47.155
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 05:09:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:09:04.238746 2026] [security2:error] [pid 27032:tid 27032] [client 88.218.47.155:30197] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 01:09:04.238746 2026] [security2:error] [pid 27032:tid 27032] [client 88.218.47.155:30197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.brinkworthmodels.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.brinkworthmodels.com"] [uri "/models/rollsroyce.htm"] [unique_id "auQmcPvoBtjLSCS7OLR0eQAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 19:41:01
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:40:57.656858 2026] [security2:error] [pid 28888:tid 28888] [client 88.218.47.155:15477] M ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.47.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:40:57.656858 2026] [security2:error] [pid 28888:tid 28888] [client 88.218.47.155:15477] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||travelswithfriends.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "travelswithfriends.com"] [uri "/Sights/Sights_Reims.htm"] [unique_id "auD-SYmeeXQu5A7dwZvhOgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-10-16 04:11:09
UTC ·
(3 weeks ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-15 00:04:33
UTC ·
(3 months ago)
Brute force
Brute-Force
