🇺🇸
TPI-Abuse
2026-11-13 15:39:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:39:02.314735 2026] [security2:error] [pid 26498:tid 26498] [client 93.177.119.185:13375] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:39:02.314735 2026] [security2:error] [pid 26498:tid 26498] [client 93.177.119.185:13375] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.huboon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.huboon.com"] [uri "/devo790621.html"] [unique_id "avcvFjiKENK-x642hhUV7gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 12:46:23
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:46:18.281643 2026] [security2:error] [pid 14139:tid 14139] [client 93.177.119.185:52429] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:46:18.281643 2026] [security2:error] [pid 14139:tid 14139] [client 93.177.119.185:52429] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ofertasdetrabajosyempleos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ofertasdetrabajosyempleos.com"] [uri "/espana/buscador-canguro-madrid.php"] [unique_id "avRjmvgD0FcA7wKtUHPjvgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:03:53
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:03:47.012176 2026] [security2:error] [pid 26257:tid 26257] [client 93.177.119.185:42195] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:03:47.012176 2026] [security2:error] [pid 26257:tid 26257] [client 93.177.119.185:42195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.portraitsinblues.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.portraitsinblues.com"] [uri "/09042013Indigenous.htm"] [unique_id "avKJk1h72E474qxPJ5KkDQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:24:13
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:24:07.656234 2026] [security2:error] [pid 11056:tid 11085] [client 93.177.119.185:39839] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:24:07.656234 2026] [security2:error] [pid 11056:tid 11085] [client 93.177.119.185:39839] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/producto/our-2015-best-box/"] [unique_id "avGRN8ufRWawCoC3uJVOWAAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:02:22
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:02:14.476002 2026] [security2:error] [pid 20155:tid 20155] [client 93.177.119.185:21563] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:02:14.476002 2026] [security2:error] [pid 20155:tid 20155] [client 93.177.119.185:21563] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.themadwriter.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.themadwriter.us"] [uri "/success-story-all-in-the-family-29.htm"] [unique_id "aumG9mPpcp5YapNdECU3vQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:29:24
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:29:20.372480 2026] [security2:error] [pid 32284:tid 32304] [client 93.177.119.185:49193] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:29:20.372480 2026] [security2:error] [pid 32284:tid 32304] [client 93.177.119.185:49193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.triestemagica.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.triestemagica.org"] [uri "/english/reserved/conf_andrews2004.php"] [unique_id "auI_AA8TJzmdQRftd6XDgAAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 17:56:59
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:56:54.777873 2026] [security2:error] [pid 5513:tid 5513] [client 93.177.119.185:25393] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:56:54.777873 2026] [security2:error] [pid 5513:tid 5513] [client 93.177.119.185:25393] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.g-peopleland.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.g-peopleland.com"] [uri "/GW-5625_Dawn_Black.htm"] [unique_id "auI3ZjgwQ1Mcnm6UC3LeawAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 03:33:19
UTC ·
(1 month ago)
WordPress Brute Force
Brute-Force
🇩🇪
LRob
2026-08-10 02:51:14
UTC ·
(3 months ago)
WordPress probing | req: /xmlrpc.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15
Brute-Force
Web App Attack
🇩🇪
4server
2026-07-29 00:59:19
UTC ·
(3 months ago)
[WedJul2902:59:17.4038652026][security2:error][pid846222:tid846297][client93.177.119.185:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"9 ...
show more
[WedJul2902:59:17.4038652026][security2:error][pid846222:tid846297][client93.177.119.185:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"www.gustotondo.ch\"][uri\"/xmlrpc.php\"][unique_id\"amlQZRrc2GaQz6lYHyZ38wAAAIY\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-07-23 03:38:23
UTC ·
(3 months ago)
Suspicious or malicious traffic has been detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 00:44:08
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 20:44:01.598706 2026] [security2:error] [pid 15015:tid 15015] [client 93.177.119.185:23975] ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 20:44:01.598706 2026] [security2:error] [pid 15015:tid 15015] [client 93.177.119.185:23975] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||securityzonepr.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "securityzonepr.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al7A0Z6Yp-PJepazgw74TgAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:28:25
UTC ·
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:28:18.394609 2026] [security2:error] [pid 1791:tid 1791] [client 93.177.119.185:29175] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:28:18.394609 2026] [security2:error] [pid 1791:tid 1791] [client 93.177.119.185:29175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||techlinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "techlinks.com"] [uri "/"] [unique_id "ai85EiGY_ThVLnYg46KSCAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-27 22:40:32
UTC ·
(6 months ago)
FPROCO WEBEXPLOIT 93.177.119.185 (93.177.119.185)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 00:48:28
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 20:48:21.644832 2026] [security2:error] [pid 31756:tid 31756] [client 93.177.119.185:35817] ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.119.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 20:48:21.644832 2026] [security2:error] [pid 31756:tid 31756] [client 93.177.119.185:35817] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aeongames.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aeongames.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeq91cksQvcw-Vy4lFJ8rwAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
