🇺🇸
TPI-Abuse
2026-11-14 22:58:08
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:58:03.413783 2026] [security2:error] [pid 1810662:tid 1810662] [client 155.212.36.134:41 ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:58:03.413783 2026] [security2:error] [pid 1810662:tid 1810662] [client 155.212.36.134:41733] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.drpeppard.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.drpeppard.com"] [uri "/html/faq.html"] [unique_id "avjne0J_6bXngBKUfiePWAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-14 20:00:14
UTC ·
(1 day ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇪🇸
librebit
2026-11-10 08:08:36
UTC ·
(5 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-10 06:05:16
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:05:09.218259 2026] [security2:error] [pid 32122:tid 32122] [client 155.212.36.134:25531] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:05:09.218259 2026] [security2:error] [pid 32122:tid 32122] [client 155.212.36.134:25531] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/aparatos/agitadororbitalydevaivenedmunbuehleradapt.html"] [unique_id "avK0FRu8703yCPfhP-R5AgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-08 01:26:25
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-11-05 00:13:49
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 05:43:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:43:54.617459 2026] [security2:error] [pid 12877:tid 12877] [client 155.212.36.134:22797] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:43:54.617459 2026] [security2:error] [pid 12877:tid 12877] [client 155.212.36.134:22797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.donnysimonton.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.donnysimonton.com"] [uri "/2010/03/14/time-for-an-mri/"] [unique_id "aul0ml2tygHNBclopeABmgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:50:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:50:37.926196 2026] [security2:error] [pid 31557:tid 31557] [client 155.212.36.134:23701] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:50:37.926196 2026] [security2:error] [pid 31557:tid 31557] [client 155.212.36.134:23701] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.starfrontiers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.starfrontiers.com"] [uri "/KennRyan/tetrarch.htm"] [unique_id "auJuLcIYkc4cC4-5v6qQiwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-15 07:20:17
UTC ·
(1 month ago)
| High amount of POST requests in a small period of time (likely bot).
Web App Attack
Hacking
SQL Injection
🇩🇪
Ilop
2026-10-08 21:00:28
UTC ·
(1 month ago)
[hp-100] 19 unsolicited packets to honeypot ports 8080 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-09-28 23:30:53
UTC ·
(1 month ago)
[hp-100] 19 unsolicited packets to honeypot ports 8080 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-09-25 02:00:20
UTC ·
(1 month ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇮🇪
RoboSOC
2026-09-01 16:31:31
UTC ·
(2 months ago)
WordPress Core author exclude SQL Injection Vulnerability, PTR: PTR record not found
Hacking
🇩🇪
Ilop
2026-09-01 15:30:14
UTC ·
(2 months ago)
[hp-100] 7 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇳🇱
DonAtari
2026-08-28 07:39:12
UTC ·
(2 months ago)
DShield firewall scan - TCP to port 7547
Brute-Force
SSH
