🇩🇪
Vegascosmetics
2026-07-01 10:54:36
(1 week ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after repeated server errors (fuzzing). Vegas ...
show more
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after repeated server errors (fuzzing). Vegas Security
show less
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 21:54:22
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 17:54:14.379694 2026] [security2:error] [pid 19670:tid 19670] [client 161.115.234.253:42381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||advancedmotorsports.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "advancedmotorsports.com"] [uri "/"] [unique_id "akQ7BnWOIkZTiVF-WJIQ8wAAAAM"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-28 14:11:32
(2 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 01:54:51
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 21:54:47.320820 2026] [security2:error] [pid 9719:tid 9719] [client 161.115.234.253:60897] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.centrosteckerl.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.centrosteckerl.com"] [uri "/"] [unique_id "ahuU5y2L1rqBTQCupin6kgAAABE"], referer: http://steckerl.info/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-29 21:09:32
(1 month ago)
Malicious activity detected
Hacking
Web App Attack
🇫🇷
MatStef132
2026-05-17 10:25:03
(1 month ago)
MatShield L7: blocked on mathost.eu (sec-fetch-referer-contradiction)
DDoS Attack
🇺🇸
TPI-Abuse
2026-05-07 09:55:58
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 05:55:51.735902 2026] [security2:error] [pid 3259:tid 3259] [client 161.115.234.253:58711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.delicioushotspots.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.delicioushotspots.com"] [uri "/"] [unique_id "afxhpwM8slGEXDTd2TM0tQAAAAo"], referer: http://delicioushotspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-05 17:30:24
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 161.115.234.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 13:30:20.066084 2026] [security2:error] [pid 23910:tid 23910] [client 161.115.234.253:45197] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.azcrittergetter.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.azcrittergetter.com"] [uri "/csfitz.com"] [unique_id "afopLDBcPKHJsiz6232FtwAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-25 07:15:03
(2 months ago)
Malicious activity detected
Hacking
Web App Attack