🇺🇸
TPI-Abuse
2026-11-15 00:32:00
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210350) triggered by 103.124.110.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:31:52.326130 2026] [security2:error] [pid 1913491:tid 1913491] [client 103.124.110.113: ...
show more
(mod_security) mod_security (id:210350) triggered by 103.124.110.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:31:52.326130 2026] [security2:error] [pid 1913491:tid 1913491] [client 103.124.110.113:55040] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ds12bonn.de|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ds12bonn.de"] [uri "/kurse"] [unique_id "avj9eKMXBkAJAHZK-cqQ6wAAAAw"], referer: https://pilates-slings.eu/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 16:28:20
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 103.124.110.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:28:11.682478 2026] [security2:error] [pid 26396:tid 26396] [client 103.124.110.113:4459 ...
show more
(mod_security) mod_security (id:225170) triggered by 103.124.110.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 11:28:11.682478 2026] [security2:error] [pid 26396:tid 26396] [client 103.124.110.113:44598] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frenchla.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frenchla.com"] [uri "/wp-json/wp/v2/users"] [unique_id "avXpG3xT7fCeDh-Lbig46gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-11-11 05:24:13
UTC ·
(4 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=68&topics%5B3%5D=42&topics%5B4%5D=52&topics%5B5%5D=45 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=68&topics%5B3%5D=42&topics%5B4%5D=52&topics%5B5%5D=45 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:135.0) Gecko/20100101 Firefox/135.0")
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-10 01:31:36
UTC ·
(5 days ago)
(mod_security) mod_security (id:225170) triggered by 103.124.110.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:31:29.612883 2026] [security2:error] [pid 7442:tid 7442] [client 103.124.110.113:53032] ...
show more
(mod_security) mod_security (id:225170) triggered by 103.124.110.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:31:29.612883 2026] [security2:error] [pid 7442:tid 7442] [client 103.124.110.113:53032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artspacecleveland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artspacecleveland.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avJz8WS5CT2DUSR4HOWpyQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-29 16:50:44
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2025-11-18 05:31:53
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-15 16:29:11
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇳🇱
exxos
2025-08-01 03:36:15
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-08-01 02:34:48
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-31 01:43:21
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-30 02:40:55
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-27 21:12:08
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
🇳🇱
exxos
2025-07-24 16:58:52
UTC ·
(1 year ago)
HTTP1.x attacks
DDoS Attack
