2026-02-21 16:05:29
UTC ·
(8 months ago)
Hacking Attempt (Website Honeypot)
Hacking
Web App Attack
🇺🇸
kosada.com
2026-02-18 10:04:55
UTC ·
(8 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-01-09 20:57:24
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 15:57:19.951851 2026] [security2:error] [pid 2079247:tid 2079300] [client 156.239.209.31:17 ...
show more
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 15:57:19.951851 2026] [security2:error] [pid 2079247:tid 2079300] [client 156.239.209.31:17922] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.quantumgaze.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.quantumgaze.com"] [uri "/wp-login.php"] [unique_id "aWFrr7KjPTJ-Uao3jt39qgAAANA"], referer: https://www.quantumgaze.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-07 11:11:11
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 06:11:04.666684 2026] [security2:error] [pid 3759:tid 3759] [client 156.239.209.31:21992] M ...
show more
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 06:11:04.666684 2026] [security2:error] [pid 3759:tid 3759] [client 156.239.209.31:21992] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||drdot.xyz|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "drdot.xyz"] [uri "/wp-login.php"] [unique_id "aV4_SHsSUKHKxBL02cyHTwAAAAQ"], referer: http://drdot.xyz/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-31 00:58:26
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
TPI-Abuse
2025-12-27 16:27:02
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 11:26:54.529912 2025] [security2:error] [pid 3035:tid 3035] [client 156.239.209.31:15620] M ...
show more
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 11:26:54.529912 2025] [security2:error] [pid 3035:tid 3035] [client 156.239.209.31:15620] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||primacomm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "primacomm.com"] [uri "/wp-login.php"] [unique_id "aVAIzj0TOXIWKgZ2bDa4KgAAAAI"], referer: https://primacomm.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-17 16:48:08
UTC ·
(10 months ago)
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 11:48:03.225254 2025] [security2:error] [pid 32124:tid 32124] [client 156.239.209.31:40470] ...
show more
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 11:48:03.225254 2025] [security2:error] [pid 32124:tid 32124] [client 156.239.209.31:40470] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vanmeer.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vanmeer.info"] [uri "/wp-login.php"] [unique_id "aULew7F0v8uS3HwCkNnicQAAAAc"], referer: http://www.vanmeer.info/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-12-10 09:51:05
UTC ·
(11 months ago)
botnet
DDoS Attack
🇩🇪
F242
2025-12-02 04:09:25
UTC ·
(11 months ago)
Wordpress Login or XMLRPC abuse
Web App Attack
🇺🇸
kosada.com
2025-11-22 09:15:03
UTC ·
(11 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2025-11-17 14:21:57
UTC ·
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 09:21:51.937855 2025] [security2:error] [pid 797:tid 797] [client 156.239.209.31:34405] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 09:21:51.937855 2025] [security2:error] [pid 797:tid 797] [client 156.239.209.31:34405] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hodlmoser.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hodlmoser.com"] [uri "/wp-login.php"] [unique_id "aRsvf-mnmIDhUhjBYSF5bgAAABA"], referer: http://hodlmoser.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-17 04:46:50
UTC ·
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 23:46:43.720421 2025] [security2:error] [pid 5716:tid 5716] [client 156.239.209.31:11389] M ...
show more
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 23:46:43.720421 2025] [security2:error] [pid 5716:tid 5716] [client 156.239.209.31:11389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bzbdesigns.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bzbdesigns.com"] [uri "/wp-login.php"] [unique_id "aRqos7bf7Enj6cl8vQBs4QAAAAo"], referer: http://www.bzbdesigns.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 23:30:19
UTC ·
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 18:30:16.142739 2025] [security2:error] [pid 23934:tid 23934] [client 156.239.209.31:9673] ...
show more
(mod_security) mod_security (id:210350) triggered by 156.239.209.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 18:30:16.142739 2025] [security2:error] [pid 23934:tid 23934] [client 156.239.209.31:9673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.kawkacevents.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kawkacevents.com"] [uri "/wp-login.php"] [unique_id "aRpeiBhkumYRQGEy5z0XIQAAAAI"], referer: http://www.kawkacevents.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sato
2025-09-30 07:34:34
UTC ·
(1 year ago)
*Port Scan* detected from 156.239.209.31 (US/United States/-).
Port Scan
2025-09-09 04:28:00
UTC ·
(1 year ago)
Attacks with Bad user agents
Hacking