🇩🇪
Spiderpiggy
2026-06-10 11:30:29
(4 days ago)
Automatically reported via Blackhole honeypot on phpbbextnl.be. Attempted access to restricted endpo ...
show more
Automatically reported via Blackhole honeypot on phpbbextnl.be. Attempted access to restricted endpoint: /backup/
show less
Brute-Force
Bad Web Bot
SSH
🇺🇸
TPI-Abuse
2026-06-10 07:04:54
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 03:04:50.774469 2026] [security2:error] [pid 32522:tid 32522] [client 129.226.83.78:43280] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.amchaiinc.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.amchaiinc.org"] [uri "/"] [unique_id "aikMkiISwE8Lvy-MeehIWgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 06:32:11
(4 days ago)
Illegitimate and/or suspicious requests.
Hacking
🇺🇸
itsnixk
2026-06-10 05:39:01
(4 days ago)
(mod_security) mod_security (id:920210) triggered by 129.226.83.78 (SG/Singapore/-): 1 in the last 3 ...
show more
(mod_security) mod_security (id:920210) triggered by 129.226.83.78 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 10 01:38:56.673567 2026] [security2:error] [pid 150738:tid 151115] [client 129.226.83.78:58062] ModSecurity: Access denied with code 406 (phase 1). Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "402"] [id "920210"] [msg "Multiple/Conflicting Connection Header Data Found"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aij4cEkpmOlnr36RugMEgwAAAUc"]
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-10 03:07:45
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 23:07:40.212157 2026] [security2:error] [pid 24517:tid 24517] [client 129.226.83.78:57790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ssion.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ssion.com"] [uri "/"] [unique_id "aijU_JERqc5ZQQDLXo-0ogAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 02:08:03
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 22:07:58.093971 2026] [security2:error] [pid 19473:tid 19473] [client 129.226.83.78:56714] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||campconcerto.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "campconcerto.com"] [uri "/"] [unique_id "aijG_j5WuV0wqBO3OeDDugAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-06-10 01:17:31
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
soverin
2026-06-10 00:04:46
(4 days ago)
Network scan on port 80
Email Spam
🇺🇸
TPI-Abuse
2026-06-10 00:00:31
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:00:26.658276 2026] [security2:error] [pid 1027:tid 1027] [client 129.226.83.78:33188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.247.fishing|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.247.fishing"] [uri "/"] [unique_id "aiipGhZz5H9DNP1fP5elbQAAABA"], referer: http://247.fish
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-06-09 22:55:04
(4 days ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 22:06:40
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 18:06:31.982833 2026] [security2:error] [pid 16508:tid 16508] [client 129.226.83.78:55766] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.solarfarms.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.solarfarms.info"] [uri "/"] [unique_id "aiiOZzWu6uqruvTyW-viVQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:50:33
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:50:25.476885 2026] [security2:error] [pid 9759:tid 9759] [client 129.226.83.78:41892] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pawlewicz.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pawlewicz.org"] [uri "/"] [unique_id "aih8kVUcvoI5Bv0oq6BFowAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:21:40
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:21:32.790124 2026] [security2:error] [pid 9536:tid 9655] [client 129.226.83.78:53328] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.annie-interface.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.annie-interface.org"] [uri "/"] [unique_id "aih1zFH8PazriOP0JAdM6AAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 19:44:28
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 129.226.83.78 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 15:44:21.918927 2026] [security2:error] [pid 21567:tid 21567] [client 129.226.83.78:45326] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.teguer.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.teguer.com"] [uri "/"] [unique_id "aihtFQFr-9TMKzNMExe4sgAAAAY"], referer: http://teguer.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-06-09 19:18:19
(4 days ago)
F2B - Malicious activity detected. URL Probing. -151302cd-
Hacking
Bad Web Bot
Web App Attack