🇩🇪
ghostwarriors
2026-08-31 11:50:11
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-08-31 11:26:22
(1 day ago)
2026/08/31 13:26:20 [error] 36669#100554: *1268309 access forbidden by rule, client: 161.115.234.3, ...
show more
2026/08/31 13:26:20 [error] 36669#100554: *1268309 access forbidden by rule, client: 161.115.234.3, server: hondaforum.hu, request: "GET / HTTP/2.0", host: "hondaforum.hu", referrer: "https://www.google.com"
...
show less
Web Spam
🇳🇱
soverin
2026-07-30 19:22:55
(1 month ago)
Network scan on port 443
Email Spam
🇺🇸
TPI-Abuse
2026-07-27 22:39:47
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:39:42.898324 2026] [security2:error] [pid 23774:tid 23774] [client 161.115.234.3:39839] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||medicalsalesrepcareer.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "medicalsalesrepcareer.com"] [uri "/"] [unique_id "amfeLlxzxZvBuwc0sjQPPwAAAAQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-23 11:27:31
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 07:27:27.536449 2026] [security2:error] [pid 30125:tid 30125] [client 161.115.234.3:55303] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nashes.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nashes.net"] [uri "/peeperkeeper.html"] [unique_id "ahGPH46pdRfxHNmyLikH6wAAAII"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 08:37:29
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 04:37:21.223217 2026] [security2:error] [pid 9096:tid 9125] [client 161.115.234.3:52401] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mjkotob.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mjkotob.com"] [uri "/"] [unique_id "ag1ywXWxZrHSdW4eWviUkwAAAFg"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-17 22:00:55
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 161.115.234.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 18:00:51.183833 2026] [security2:error] [pid 9114:tid 9114] [client 161.115.234.3:55611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.abakada.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.abakada.net"] [uri "/scmicron"] [unique_id "ago6k6qqvBiDW3iHtT3snwAAABI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-03-29 16:16:24
(5 months ago)
scw-Joomla User : try to access forms...
Hacking
🇦🇺
MAGIC
2026-02-16 00:51:21
(6 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
dbmwebdesign
2026-02-12 05:05:59
(6 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇺🇸
Rip
2026-02-12 01:24:32
(6 months ago)
Authentication attack attempt. CMS Brute Force - Access Forbidden
Brute-Force
Web App Attack
🇩🇪
abdubhai
2026-02-12 00:24:02
(6 months ago)
161.115.234.3 - - [12/Feb/2026:0
...
Brute-Force
🇺🇸
WeekendWeb
2026-02-11 03:53:12
(6 months ago)
Wordpress Vunerability attack
Web App Attack
🇳🇱
applemooz
2026-02-10 21:29:12
(6 months ago)
WordPress XMLRPC Brute Force Attacks
...
Brute-Force
Web App Attack
🇷🇺
DZBOT
2026-02-04 18:08:16
(6 months ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack