🇺🇸
TPI-Abuse
2026-11-09 06:23:54
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210350) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:23:49.522501 2026] [security2:error] [pid 32424:tid 32424] [client 89.19.34.19:9767] ModSec ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:23:49.522501 2026] [security2:error] [pid 32424:tid 32424] [client 89.19.34.19:9767] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.freepatternstocrochet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.freepatternstocrochet.com"] [uri "/Crochet Doily Pattern"] [unique_id "avFm9ccJSHJOQXT2wmiSpAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:13:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:13:00.685537 2026] [security2:error] [pid 1300:tid 1300] [client 89.19.34.19:20727] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:13:00.685537 2026] [security2:error] [pid 1300:tid 1300] [client 89.19.34.19:20727] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Witkin, Paul L obit 1917-2001.htm"] [unique_id "auI7LC36TnAPBuaimHhiJwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 16:45:08
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:45:04.496484 2026] [security2:error] [pid 26939:tid 26939] [client 89.19.34.19:56669] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:45:04.496484 2026] [security2:error] [pid 26939:tid 26939] [client 89.19.34.19:56669] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/stationery-design-baltimore/"] [unique_id "auImkP2fjW7VdhFFV9dLLwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nowyouknow
2026-10-15 14:31:44
UTC ·
(3 weeks ago)
(From [email protected] ) Hey,
My name is Ryan Wiedmann , I am the Executive Assistant & Investment Manager at 35 capital , a private investment firm focused on providing flexible and strategic capital solutions to businesses o ...
show more
(From [email protected] ) Hey,
My name is Ryan Wiedmann , I am the Executive Assistant & Investment Manager at 35 capital , a private investment firm focused on providing flexible and strategic capital solutions to businesses owners.
We currently have investment funds available to support a wide range of financing needs, including business growth and expansion, refinancing, acquisitions, and project development.
If you are currently exploring funding options or planning an upcoming transaction, I would welcome the opportunity to review your project summary, business plan, or investor presentation.
I look forward to learning more about your opportunity, waiting for your reply ,
Best regards,
Ryan Wiedmann
Executive Assistant & Investment Manager
show less
Phishing
Web Spam
🇫🇷
masterguru
2026-09-23 12:49:24
UTC ·
(1 month ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 89.19.34.19 (US/United States/-): 1 in the last 3600 secs (0-195)
Hacking
🇺🇸
TPI-Abuse
2026-04-16 03:02:58
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 23:02:51.487132 2026] [security2:error] [pid 2343317:tid 2343317] [client 89.19.34.19:33635] M ...
show more
(mod_security) mod_security (id:210730) triggered by 89.19.34.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 23:02:51.487132 2026] [security2:error] [pid 2343317:tid 2343317] [client 89.19.34.19:33635] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Briarwood II/Briarwood II/Stetson Bordeaux/originals/Thumbs.db"] [unique_id "aeBRW_9kar7hbZAdVceVWQAAAAY"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Briarwood%20II/Briarwood%20II/Stetson%20Bordeaux/originals/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-01-12 18:46:00
UTC ·
(9 months ago)
Malicious scan suspected (score: 3 >= 3): Directory Traversal (Path) / Path Matches Pattern (/wp-admin/*)
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2025-12-13 01:40:06
UTC ·
(10 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇿
lp
2025-12-04 20:50:29
UTC ·
(11 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 89.19.34.19
2025-12-04T21:07:45+01:00 vpn Access-Reject 'user4' station: 89.19.34.19 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
2025-12-03 14:46:46
UTC ·
(11 months ago)
VPN endpoint login attempts, credential stuffing
Brute-Force
🇨🇿
lp
2025-12-02 19:24:06
UTC ·
(11 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 89.19.34.19
2025-12-02T19:32:43+01:00 vpn Access-Reject 'savin' station: 89.19.34.19 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
2025-12-01 04:01:17
UTC ·
(11 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.01 is noted in report timestamp
Hacking
Brute-Force
🇨🇿
lp
2025-12-01 01:23:56
UTC ·
(11 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 89.19.34.19
2025-12-01T02:11:45+01:00 vpn Access-Reject 'maier' station: 89.19.34.19 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇨🇭
backslash
2025-11-11 17:10:11
UTC ·
(11 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2024-09-27 15:55:10
UTC ·
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
