🇺🇸
TPI-Abuse
2026-10-21 03:25:49
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:25:45.119419 2026] [security2:error] [pid 22198:tid 22198] [client 89.19.35.237:10059] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/category/f-50-54/page/2/"] [unique_id "atgwuVVuEgnH2m23wHtYDQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 08:51:17
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 04:51:10.190152 2026] [security2:error] [pid 27029:tid 27029] [client 89.19.35.237:49077] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||carterslawncare.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "carterslawncare.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajEOfsC0csXuQRnQS3CFEwAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 10:27:48
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:27:43.587056 2026] [security2:error] [pid 22407:tid 22407] [client 89.19.35.237:22193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blackmanfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blackmanfamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai_Tn7jjwjELYcEQbYyXNAAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 08:30:23
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:30:15.388810 2026] [security2:error] [pid 9553:tid 9553] [client 89.19.35.237:13085] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dietzengineers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dietzengineers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aivDlww8I_-BVcQ_dcIwdgAAAD8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-30 17:49:31
(4 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-28 23:39:31
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 19:39:24.241776 2026] [security2:error] [pid 3723:tid 3723] [client 89.19.35.237:55197] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gemexpressions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gemexpressions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahjSLAi5jApXwI6Pzb6L_QAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 11:02:29
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 07:02:21.037855 2026] [security2:error] [pid 12263:tid 12268] [client 89.19.35.237:24227] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gotogps.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gotogps.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agmgPZitGiTVQVFs3SETeQAAAMA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MrDD
2024-07-17 21:38:12
(2 years ago)
Brute Force on Cisco Web VPN
Brute-Force
🇬🇧
essinghigh
2024-07-16 04:16:25
(2 years ago)
1721103384 # Service_probe # SIGNATURE_SEND # source_ip:89.19.35.237 # dst_port:60000
...
Port Scan
🇺🇸
TTWebhosting
2022-08-14 13:43:48
(4 years ago)
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (CN/China/Shanghai/Shanghai/-): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 89.19.35.237 (CN/China/Shanghai/Shanghai/-): 1 in the last 3600 secs
show less
Port Scan
Hacking
Brute-Force
