🇺🇸
TPI-Abuse
2026-10-24 11:09:17
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 07:09:10.630543 2026] [security2:error] [pid 12711:tid 12711] [client 93.177.94.143:51537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.convtek.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.convtek.com"] [uri "/tasks/"] [unique_id "atyR1tcm4kLGW0ZxT_kMVQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 12:14:46
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 08:14:42.626498 2026] [security2:error] [pid 16439:tid 16439] [client 93.177.94.143:60791] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||acquivest.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acquivest.net"] [uri "/blog/multiples-on-the-rise-reaching-record-heights.html"] [unique_id "attPspDgBa8p_uBlFmjU9wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-16 00:10:02
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-15 00:22:37
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 93.177.94.143
2026-09-15T01:53:37+02: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 93.177.94.143
2026-09-15T01:53:37+02:00 vpn Access-Reject 'ping' station: 93.177.94.143 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-09 02:19:58
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
2026-08-28 23:53:17
(1 month ago)
Global Protect brute force attempt
Brute-Force
Web App Attack
2026-08-26 13:13:42
(1 month ago)
GlobalProtect password spraying attempt.
Brute-Force
Web App Attack
2026-08-20 19:37:47
(2 months ago)
VPN portal credential brute-force / password spray against a SAML-only GlobalProtect portal (28 atte ...
show more
VPN portal credential brute-force / password spray against a SAML-only GlobalProtect portal (28 attempt(s) observed, 28 username(s) tried). Source blocked on our perimeter.
show less
Brute-Force
2026-08-20 02:22:50
(2 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇫🇮
JimArchon72
2026-07-22 23:25:03
(3 months ago)
2026/07/22 23:22:53 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 12:17:18
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 08:17:13.351287 2026] [security2:error] [pid 11975:tid 11975] [client 93.177.94.143:27937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rcrgalicia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rcrgalicia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ailVyQGR-ox_VuPl3gylCwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 11:48:39
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 93.177.94.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 07:48:33.783475 2026] [security2:error] [pid 22278:tid 22278] [client 93.177.94.143:9515] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.cles-fonctionnel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cles-fonctionnel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ailPEY3JdWU6ow_jtpPH6QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MusicLibrary
2026-04-02 10:59:59
(6 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇩🇪
london2038.com
2026-03-22 09:53:53
(7 months ago)
Malformed or malicious web request
93.177.94.143 - - [22/Mar/2026:10:53:51 +0100] "POST /xmlrpc.php ...
show more
Malformed or malicious web request
93.177.94.143 - - [22/Mar/2026:10:53:51 +0100] "POST /xmlrpc.php HTTP/1.1" 404 4187 "-" "Chrome/91.1 Safari/531.51"
show less
Hacking
Web App Attack
