|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 146.19.140.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:09:56.933344 2026] [security2:error] [pid 8300:tid 8300] [client 146.19.140.233:42789] M ...
show more
(mod_security) mod_security (id:210350) triggered by 146.19.140.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:09:56.933344 2026] [security2:error] [pid 8300:tid 8300] [client 146.19.140.233:42789] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/political-communication/page/2/"] [unique_id "auPgVNT_SrAwdYmRaXNbEgAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
BlueWire Hosting
|
|
Aggressive scanning resulting into 404
|
Bad Web Bot
|
|
🇧🇪
taivas.nl
|
|
Many_bad_calls
|
Web App Attack
|
|
🇧🇪
taivas.nl
|
|
Bad_requests
|
Bad Web Bot
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
|
Exploited Host
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 146.19.140.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 01:26:23.772227 2026] [security2:error] [pid 717213:tid 717213] [client 146.19.140.233:2855 ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.140.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 01:26:23.772227 2026] [security2:error] [pid 717213:tid 717213] [client 146.19.140.233:28551] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lekacos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lekacos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amg9f6EOXRYRNahJV-IATgAAAA4"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 146.19.140.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:13:04.493079 2026] [security2:error] [pid 3518565:tid 3518565] [client 146.19.140.233:31 ...
show more
(mod_security) mod_security (id:225170) triggered by 146.19.140.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:13:04.493079 2026] [security2:error] [pid 3518565:tid 3518565] [client 146.19.140.233:31221] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||embeddedtrade.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "embeddedtrade.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amR-IP3wS02zQDslln1yNwAAABM"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TRoden
|
|
Geo Block Plugin: Escalation flag(s): rce_attempt
|
Hacking
|
|
🇦🇺
oncord
|
|
Form spam
|
Web Spam
|
|
Anonymous
|
|
Web attack
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
oncord
|
|
Form spam
|
Web Spam
|
|
🇩🇪
psauxit
|
|
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
|
Hacking
Web App Attack
|
|
Anonymous
|
|
Viewstate Trap:CE
|
Web Spam
|
|
Anonymous
|
|
multiple unauthorized attempts at Wed, 27 Aug 2025 12:41:20 +0000 a total of 1 times.
|
Brute-Force
|
|
🇦🇺
Block Rockin' Beats
|
|
Scanning forum with forged referal
|
Hacking
Web App Attack
|
