🇩🇪
big-cloud.nl
2026-11-06 23:53:54
UTC ·
(5 days ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 22:13:41
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:13:36.072311 2026] [security2:error] [pid 13183:tid 13183] [client 122.8.93.165:30327] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:13:36.072311 2026] [security2:error] [pid 13183:tid 13183] [client 122.8.93.165:30327] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Shanblott, Sam obit 1921-2004.htm"] [unique_id "au5REEqXU_uOO283zK-45wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-11-04 16:41:58
UTC ·
(1 week ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-30 00:05:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:05:17.171745 2026] [security2:error] [pid 4848:tid 4848] [client 122.8.93.165:54085] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:05:17.171745 2026] [security2:error] [pid 4848:tid 4848] [client 122.8.93.165:54085] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fattoria-rendena.it|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fattoria-rendena.it"] [uri "/dishes/salmon-with-lemon-capers-and-rosemary/"] [unique_id "auPfPbDE5i-VVEUaDqw2AQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 12:28:59
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:28:52.204542 2026] [security2:error] [pid 18426:tid 18426] [client 122.8.93.165:48837] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:28:52.204542 2026] [security2:error] [pid 18426:tid 18426] [client 122.8.93.165:48837] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.indyham.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.indyham.com"] [uri "/downloads/pi3-fldigi-setup.sh"] [unique_id "auM8BPIRmbEOEyJckDVYQQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:00:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:00:04.125278 2026] [security2:error] [pid 16208:tid 16208] [client 122.8.93.165:40969] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 122.8.93.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:00:04.125278 2026] [security2:error] [pid 16208:tid 16208] [client 122.8.93.165:40969] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.manatawnycreekfarm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.manatawnycreekfarm.com"] [uri "/autumnph.htm"] [unique_id "auJGNB-hk14aVlAaIHu1GwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-24 06:40:09
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
floreriaexpress
2026-09-12 12:47:58
UTC ·
(2 months ago)
FakeADS-Anti: country:CN | https://floreriaexpresschile.cl/catalogo/?shop_view=grid&per_row=2&shortcode=1&add-to-cart=102232
Bad Web Bot
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2026-02-12 12:22:31
UTC ·
(9 months ago)
wordpress-trap
Web App Attack
🇫🇮
JimArchon72
2026-02-12 10:55:01
UTC ·
(9 months ago)
2026/02/12 10:52:41 "GET /wp-login.php HTTP/1.1"
Web App Attack
🇦🇺
afleventoffice.com.au
2026-02-12 01:13:25
UTC ·
(9 months ago)
GET /wp-login.php HTTP/1.1
Web App Attack
