🇺🇸
TPI-Abuse
2026-11-14 09:14:14
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:14:01.111640 2026] [security2:error] [pid 21277:tid 21277] [client 104.245.243.64:62933] ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:14:01.111640 2026] [security2:error] [pid 21277:tid 21277] [client 104.245.243.64:62933] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||advancedmotorsports.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "advancedmotorsports.com"] [uri "/product/2012-ducati-multistrada-1200st-2/"] [unique_id "avgmWWpc3K7azS2kv4rpRQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 02:48:26
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:48:11.663035 2026] [security2:error] [pid 12254:tid 12254] [client 104.245.243.64:34323] ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 21:48:11.663035 2026] [security2:error] [pid 12254:tid 12254] [client 104.245.243.64:34323] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.clubfansite.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clubfansite.com"] [uri "/maeloruiz/Fotoseimagenes.php"] [unique_id "avfL66nj-cKjzFJx_A0QLQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 16:36:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:36:04.174274 2026] [security2:error] [pid 27226:tid 27226] [client 104.245.243.64:47603] ...
show more
(mod_security) mod_security (id:210350) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:36:04.174274 2026] [security2:error] [pid 27226:tid 27226] [client 104.245.243.64:47603] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/something-to-remember-when-im-88/"] [unique_id "avSZdOPI9rUEEw3HWPKMJwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-09 19:11:00
UTC ·
(4 days ago)
Multiple Violations by Botnets
Port Scan
Web App Attack
🇩🇪
LRob
2026-11-04 01:28:49
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | method: GET | path: /nos-solutions/force-de-vente | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36
Bad Web Bot
🇳🇱
vintia.cloud
2026-11-03 15:16:31
UTC ·
(1 week ago)
2026-11-03 15:16 UTC HTTPS/443 - exploit and credential scanning. 2 GET requests to 2 distinct paths that do not exist on this application, across 1 hostnames, first seen 2026-11-03 15:05. Sample paths: /wp-admin, /wp-login.php. User-agent: "Mozilla/ ...
show more
2026-11-03 15:16 UTC HTTPS/443 - exploit and credential scanning. 2 GET requests to 2 distinct paths that do not exist on this application, across 1 hostnames, first seen 2026-11-03 15:05. Sample paths: /wp-admin, /wp-login.php. User-agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)". Block cycle 2 for this address.
show less
Web App Attack
Hacking
2026-07-25 05:41:00
UTC ·
(3 months ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇺🇸
TPI-Abuse
2026-07-24 22:43:38
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 18:43:31.345512 2026] [security2:error] [pid 9093:tid 9093] [client 104.245.243.64:32715] M ...
show more
(mod_security) mod_security (id:210730) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 18:43:31.345512 2026] [security2:error] [pid 9093:tid 9093] [client 104.245.243.64:32715] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||n3fjp.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "n3fjp.com"] [uri "/html.db"] [unique_id "amPqk3EUxZeaavLoN8wJiwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-17 07:39:20
UTC ·
(3 months ago)
"HEAD /wp-content.zip HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:16:14
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:15:52.087288 2026] [security2:error] [pid 2051:tid 2051] [client 104.245.243.64:57353] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.245.243.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:15:52.087288 2026] [security2:error] [pid 2051:tid 2051] [client 104.245.243.64:57353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "walkerscayproductions.theavgroup.com"] [uri "/wp-config.php.txt"] [unique_id "aie9qDOa3SSLI-wc0OvTsgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
tecnicorioja
2026-06-03 22:00:56
UTC ·
(5 months ago)
wp-login attack [03/Jun/2026:12:37:51
Brute-Force
Web App Attack
2026-05-15 00:42:54
UTC ·
(5 months ago)
Forum/form spam
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-29 13:06:09
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
nowyouknow
2025-12-25 11:18:00
UTC ·
(10 months ago)
(From [email protected] ) Hello Team,
I’m writing because I found your site on Page 2 for your main keywords.
Frankly, it makes me frustrated. Your website is much better than the guys ranking #1, but they are getting all the traffic. ...
show more
(From [email protected] ) Hello Team,
I’m writing because I found your site on Page 2 for your main keywords.
Frankly, it makes me frustrated. Your website is much better than the guys ranking #1, but they are getting all the traffic.
You are basically donating your customers to them for free, just because of some technical SEO issues.
I have the data in front of me showing exactly why Google is favoring them over you.
I’d love to walk you through the fix.
Do you have availability this week for a brief call?
Cheers,
PMP 10x SEO Growth
show less
Phishing
Web Spam
🇺🇸
nowyouknow
2025-12-19 21:56:15
UTC ·
(10 months ago)
Malicious Traffic/Form Submission
Phishing
Web Spam
