🇺🇸
TPI-Abuse
2026-11-11 07:40:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:40:21.363167 2026] [security2:error] [pid 25074:tid 25074] [client 93.177.119.40:13477] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 02:40:21.363167 2026] [security2:error] [pid 25074:tid 25074] [client 93.177.119.40:13477] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.huboon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.huboon.com"] [uri "/devo800814.html"] [unique_id "avQb5aIrvPPimr7e_OIp2wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 04:38:12
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:38:06.777090 2026] [security2:error] [pid 18154:tid 18154] [client 93.177.119.40:34287] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:38:06.777090 2026] [security2:error] [pid 18154:tid 18154] [client 93.177.119.40:34287] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.eroticperfection.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.eroticperfection.com"] [uri "/gals/metart253da.html"] [unique_id "avPxLjMcEcj6kc5NWYbGewAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:07:47
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:07:40.755519 2026] [security2:error] [pid 19454:tid 19454] [client 93.177.119.40:10019] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:07:40.755519 2026] [security2:error] [pid 19454:tid 19454] [client 93.177.119.40:10019] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/festivals/brisbanes-bayside-festival-wynnum-fringe-returns-bigger-than-ever-before/"] [unique_id "avFHDAi1ZuPM-F3UyB_L8QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:22:35
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:22:29.844661 2026] [security2:error] [pid 21197:tid 21197] [client 93.177.119.40:30479] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:22:29.844661 2026] [security2:error] [pid 21197:tid 21197] [client 93.177.119.40:30479] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||interartny.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "interartny.com"] [uri "/show16-03.htm"] [unique_id "avEuZZRrHWGXOT41yJOzPAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 14:02:55
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:02:52.203064 2026] [security2:error] [pid 330752:tid 330764] [client 93.177.119.40:46675] ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:02:52.203064 2026] [security2:error] [pid 330752:tid 330764] [client 93.177.119.40:46675] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.killasgarage.bike|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.killasgarage.bike"] [uri "/uncategorized/video-a-better-way-to-remove-and-re-install-your-front-wheel/"] [unique_id "avCBDOco7CLHVA43GupvXgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 11:42:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 06:42:17.033023 2026] [security2:error] [pid 27227:tid 27227] [client 93.177.119.40:13355] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 06:42:17.033023 2026] [security2:error] [pid 27227:tid 27227] [client 93.177.119.40:13355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lertap5.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lertap5.com"] [uri "/HTMLHelp/Lrtp59HTML/cookstour_full_statistics_affective.htm"] [unique_id "auclmfoWpXWAZ6bR5iKVYAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 04:33:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:33:16.146716 2026] [security2:error] [pid 3251:tid 3251] [client 93.177.119.40:25827] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 00:33:16.146716 2026] [security2:error] [pid 3251:tid 3251] [client 93.177.119.40:25827] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.worthhistory.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.worthhistory.org"] [uri "/sites/mainmuseum/mainmuseum.htm"] [unique_id "auQeDB1kM95nxW0i4SHp0AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 14:13:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:13:17.151500 2026] [security2:error] [pid 3802:tid 3814] [client 93.177.119.40:60411] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:13:17.151500 2026] [security2:error] [pid 3802:tid 3814] [client 93.177.119.40:60411] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.linfoulk.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.linfoulk.org"] [uri "/home/brass_ensemble.html"] [unique_id "auIC_Xj06HMjtC5V9lfQYAAAAMk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-27 22:35:12
UTC ·
(2 weeks ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 19:52:06
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:52:02.670841 2026] [security2:error] [pid 20109:tid 20109] [client 93.177.119.40:45033] M ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.119.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:52:02.670841 2026] [security2:error] [pid 20109:tid 20109] [client 93.177.119.40:45033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||johnsoncityjudo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "johnsoncityjudo.com"] [uri "/jcjcbio.html"] [unique_id "auEA4sWobvTgNIY3dOno7AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-15 03:22:58
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 93.177.119.40
2026-09-15T04:49:00+02:00 vpn Access-Reject 'jeancherng1768' station: 93.177.119.40 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '< ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 93.177.119.40
2026-09-15T04:49:00+02:00 vpn Access-Reject 'jeancherng1768' station: 93.177.119.40 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇪🇸
librebit
2026-08-20 04:07:52
UTC ·
(2 months ago)
Brute force
Brute-Force
🇩🇪
stinpriza
2026-05-26 01:38:13
UTC ·
(5 months ago)
Web App Attack
Web App Attack
