2025-09-13 02:03:14
(8 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
2025-09-11 16:33:35
(8 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇧🇷
hostseries
2025-09-11 08:40:51
(8 months ago)
Trigger: LF_DISTATTACK
Brute-Force
🇺🇸
TPI-Abuse
2025-09-07 08:43:00
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 04:42:54.492796 2025] [security2:error] [pid 23924:tid 23924] [client 156.253.178.67:9399] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ggisoft.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ggisoft.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aL1FjnUVM3oBWVm0FKVG-wAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-23 12:59:51
(9 months ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-04-03 21:49:51
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 17:49:46.766518 2025] [security2:error] [pid 30944:tid 30944] [client 156.253.178.67:45265] [client 156.253.178.67] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||nordicbuilders.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "nordicbuilders.net"] [uri "/"] [unique_id "Z-8CegdSRhpT-gp43AJadgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-27 14:11:30
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 10:11:25.629478 2025] [security2:error] [pid 1629515:tid 1629515] [client 156.253.178.67:17565] [client 156.253.178.67] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||benchmarkbcs.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "benchmarkbcs.com"] [uri "/"] [unique_id "Z-VcjabxxiDRYXwQqlw-6wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-13 20:20:03
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 156.253.178.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 13 16:19:58.493019 2025] [security2:error] [pid 91110:tid 91110] [client 156.253.178.67:21109] [client 156.253.178.67] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||bccnews.us|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "bccnews.us"] [uri "/"] [unique_id "Z9M97sxZtlS5t079x6x_5QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-03-12 03:54:33
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2024-12-30 07:21:33
(1 year ago)
Attempted brute force login to web vpn 11 time(s); last attempt for 2024.12.30 is noted in report ti ...
show more
Attempted brute force login to web vpn 11 time(s); last attempt for 2024.12.30 is noted in report timestamp
show less
Hacking
Brute-Force
🇷🇴
INTEQ
2024-11-30 05:24:44
(1 year ago)
Web attack from 156.253.178.67
Web App Attack
2024-10-18 21:14:34
(1 year ago)
botnet
DDoS Attack
2024-10-16 17:51:26
(1 year ago)
botnet
DDoS Attack