🇺🇸
TPI-Abuse
2026-11-12 18:13:51
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:13:46.443226 2026] [security2:error] [pid 8979:tid 8979] [client 147.78.182.30:59955] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:13:46.443226 2026] [security2:error] [pid 8979:tid 8979] [client 147.78.182.30:59955] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||frightlibrary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "frightlibrary.org"] [uri "/lib/heath.htm"] [unique_id "avYB2jS2i5V3HQwP2qu2xwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:31:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:31:40.142914 2026] [security2:error] [pid 5402:tid 5402] [client 147.78.182.30:64555] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:31:40.142914 2026] [security2:error] [pid 5402:tid 5402] [client 147.78.182.30:64555] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.miles2go.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.miles2go.net"] [uri "/updates/october/oct29.htm"] [unique_id "auuyTBRoWXZ0VSqKow-kbQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 23:13:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 18:13:00.767470 2026] [security2:error] [pid 30602:tid 30602] [client 147.78.182.30:64079] M ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 18:13:00.767470 2026] [security2:error] [pid 30602:tid 30602] [client 147.78.182.30:64079] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.rogerg.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rogerg.com"] [uri "/books/P/Palahniuk, Chuck - Invisible Monsters.mobi"] [unique_id "aufHfI4Bgy2gyc6qOOSsJQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 20:29:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:29:36.084524 2026] [security2:error] [pid 2661:tid 2661] [client 147.78.182.30:11071] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:29:36.084524 2026] [security2:error] [pid 2661:tid 2661] [client 147.78.182.30:11071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/humble-bar-graph"] [unique_id "auehMPwKFvjdmEhpXu2svAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-25 01:19:52
UTC ·
(2 weeks ago)
Web App Attack
Web App Attack
🇳🇱
Alt255
2026-09-21 10:12:41
UTC ·
(1 month ago)
[ti-01sc] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Example: 147.78.182.30 - - [21/Sep/2026:11:17:01 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Geck ...
show more
[ti-01sc] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail apache-xmlrpc. Example: 147.78.182.30 - - [21/Sep/2026:11:17:01 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
147.78.182.30 - - [21/Sep/2026:12:11:58 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
147.78.182.30 - - [21/Sep/2026:12:12:24 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-16 15:34:11
UTC ·
(1 month ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇹🇷
neron
2026-08-11 03:06:49
UTC ·
(3 months ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇮🇹
Progetto1
2026-07-13 17:18:01
UTC ·
(4 months ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
🇨🇭
Origon
2026-07-02 12:47:27
UTC ·
(4 months ago)
http-bad-user-agent - IP: 147.78.182.30 - time="2026-07-02T14:47:26+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 147.78.182.30 (RU/26548) : 4h ban on Ip 147.78.182.30" mod ...
show more
http-bad-user-agent - IP: 147.78.182.30 - time="2026-07-02T14:47:26+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 147.78.182.30 (RU/26548) : 4h ban on Ip 147.78.182.30" module=db
show less
Bad Web Bot
🇩🇪
kjaerulff
2026-05-18 23:37:22
UTC ·
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-14 20:02:40
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
🇳🇱
BlueWire Hosting
2026-05-07 18:05:54
UTC ·
(6 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇨🇭
Origon
2026-04-30 01:18:32
UTC ·
(6 months ago)
http-bad-user-agent - IP: 147.78.182.30 - time="2026-04-30T03:18:31+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 147.78.182.30 (RU/26548) : 4h ban on Ip 147.78.182.30" mod ...
show more
http-bad-user-agent - IP: 147.78.182.30 - time="2026-04-30T03:18:31+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 147.78.182.30 (RU/26548) : 4h ban on Ip 147.78.182.30" module=db
show less
Bad Web Bot
🇨🇦
lakered
2026-04-30 00:43:56
UTC ·
(6 months ago)
Honeypot Lakered: Nginx: Malicious proxy headers injection (spoofing attempt on direct connection) (Pattern: proxy_header_detected). IP automatically banned.
Port Scan
Web App Attack
