🇮🇹
sssrit
2026-11-06 16:53:23
UTC ·
(4 hours ago)
147.78.182.228 - - [06/Nov/2026:17:53:22 +0100] "GET /finalmente-windows-11-disponibile-per-laggiornamento/ HTTP/1.1" 404 16855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 21:48:25
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:48:20.700317 2026] [security2:error] [pid 3824918:tid 3824954] [client 147.78.182.228:64 ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:48:20.700317 2026] [security2:error] [pid 3824918:tid 3824954] [client 147.78.182.228:64353] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.aafmgcc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.aafmgcc.com"] [uri "/Mentz-George-Colorado-USA-Speaker-Consultant.html"] [unique_id "auz5pPOTmHNnUVqPOX0MrwAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:46:53
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:46:46.818950 2026] [security2:error] [pid 17177:tid 17177] [client 147.78.182.228:39187] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:46:46.818950 2026] [security2:error] [pid 17177:tid 17177] [client 147.78.182.228:39187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2013/01/08/2012-book-31-and-32-ish-to-have-and-have-not-and-mao-ii/"] [unique_id "auW5BgW6e96IFR5AYlMQFQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jbcrn
2026-10-30 12:01:49
UTC ·
(1 week ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.unaccorded-cushewbird/mundificant/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/53 ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /deflagration.unaccorded-cushewbird/mundificant/. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 06:29:55
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:29:49.041409 2026] [security2:error] [pid 4913:tid 4913] [client 147.78.182.228:10697] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:29:49.041409 2026] [security2:error] [pid 4913:tid 4913] [client 147.78.182.228:10697] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||janyoors.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "janyoors.com"] [uri "/photography/new-york/jewish-community/"] [unique_id "auQ5XUIRpjqvQCnB4FpQgwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 02:05:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:05:28.629152 2026] [security2:error] [pid 32500:tid 32500] [client 147.78.182.228:10849] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:05:28.629152 2026] [security2:error] [pid 32500:tid 32500] [client 147.78.182.228:10849] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oss-in-atm.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oss-in-atm.info"] [uri "/20051207/thanks.php"] [unique_id "auP7aGjt2XAiimTz6W2MXAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 20:13:24
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:13:19.095107 2026] [security2:error] [pid 25987:tid 25987] [client 147.78.182.228:18125] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:13:19.095107 2026] [security2:error] [pid 25987:tid 25987] [client 147.78.182.228:18125] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/in/07/in122.html"] [unique_id "auJXX2KQ0GVg5s3AB5wCfgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:43:04
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:42:58.603488 2026] [security2:error] [pid 25543:tid 25543] [client 147.78.182.228:11145] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:42:58.603488 2026] [security2:error] [pid 25543:tid 25543] [client 147.78.182.228:11145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/5616-51-3.html"] [unique_id "auJCMoTbMSaBJ0a3RoedhQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-21 21:35:37
UTC ·
(2 weeks ago)
Wordlist path sweep | method: GET | path: /en/newsroom/presse/our-events/events-agenda/salon-international-de-la-lingerie/, /en/newsroom/presse/our-events/events-agenda/intermat-india/, /en/newsroom/presse/our-events/events-agenda/curve-new-york/ (+3 ...
show more
Wordlist path sweep | method: GET | path: /en/newsroom/presse/our-events/events-agenda/salon-international-de-la-lingerie/, /en/newsroom/presse/our-events/events-agenda/intermat-india/, /en/newsroom/presse/our-events/events-agenda/curve-new-york/ (+3 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Port Scan
Web App Attack
🇩🇪
stinpriza
2026-05-06 12:35:31
UTC ·
(6 months ago)
Web App Attack
Web App Attack
🇺🇸
NicoID
2026-05-01 00:16:19
UTC ·
(6 months ago)
147.78.182.228 - - [30/Apr/2026:15:46:08 -0600] "GET /wp-login.php HTTP/1.1" 200 4882 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
Brute-Force
🇺🇸
TPI-Abuse
2026-04-23 22:24:29
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 18:24:24.325933 2026] [security2:error] [pid 29335:tid 29335] [client 147.78.182.228:57583] ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 18:24:24.325933 2026] [security2:error] [pid 29335:tid 29335] [client 147.78.182.228:57583] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ruizpuche.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ruizpuche.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeqcGMW25iNOCywEAt-BUAAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-24 03:56:22
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 23:56:19.861787 2025] [security2:error] [pid 15481:tid 15586] [client 147.78.182.228:58277] ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 23:56:19.861787 2025] [security2:error] [pid 15481:tid 15586] [client 147.78.182.228:58277] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||giere.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "giere.us"] [uri "/wp-json/wp/v2/users"] [unique_id "aPr445DlClvsV5gwZlfRJwAAAgg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-24 00:22:29
UTC ·
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 20:22:21.365950 2025] [security2:error] [pid 16130:tid 16130] [client 147.78.182.228:36149] ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 20:22:21.365950 2025] [security2:error] [pid 16130:tid 16130] [client 147.78.182.228:36149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lyldevelopers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lyldevelopers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aPrGvdgUO-GCLDgcor3DeQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ne1for23
2025-10-23 22:08:55
UTC ·
(1 year ago)
147.78.182.228 - - [23/Oct/2025:22:08:55 +0000] "GET /wp-login.php HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203"
Web App Attack
