🇺🇸
TPI-Abuse
2026-10-27 19:15:28
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:15:21.765904 2026] [security2:error] [pid 14756:tid 14756] [client 166.1.131.224:49245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/rotary-rewind/rotary-rewind-apr-21-2021/"] [unique_id "auD4SeK9SnuTRXVhfXGVhQAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 01:32:02
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:31:58.698919 2026] [security2:error] [pid 14293:tid 14318] [client 166.1.131.224:60147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntma1229.htm"] [unique_id "at__DsJaL8QSmnimyZSnSwAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2026-10-26 01:00:13
(2 days ago)
Unauthorized login attempts [ access_predict]
Brute-Force
🇺🇸
TPI-Abuse
2026-10-24 13:41:30
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:41:23.248639 2026] [security2:error] [pid 20976:tid 20976] [client 166.1.131.224:24109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||15tobefit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "15tobefit.com"] [uri "/about.html"] [unique_id "aty1gw8yTL19fCBoXKpTaAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-21 00:59:48
(1 week ago)
Not following 301 redirects — wasted requests | method: HEAD | path: / | ua: Mozilla/5.0 (Windows NT ...
show more
Not following 301 redirects — wasted requests | method: HEAD | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
floreriaexpress
2026-09-08 19:37:03
(1 month ago)
FakeADS-Anti: country:UA | https://floreriaexpresschile.cl/product/ramo-11-rosas-ecuatorianas/
Bad Web Bot
🇩🇪
Ilop
2026-08-29 00:04:10
(1 month ago)
[hp-100] 15 unsolicited packets to honeypot ports 9000 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-08-23 00:02:42
(2 months ago)
[hp-100] 15 unsolicited packets to honeypot ports 9000 (OCI DShield sensor)
Port Scan
🇩🇪
C C
2026-08-09 00:33:36
(2 months ago)
Distributed scraping attack: 1469 req from 1403 rotating proxy IPs, waves of up to 150 req in 291s o ...
show more
Distributed scraping attack: 1469 req from 1403 rotating proxy IPs, waves of up to 150 req in 291s on a single URL | this IP: 1 req, 1 blocked
show less
Open Proxy
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
octageeks.com
2026-03-31 04:09:30
(6 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇺🇸
kosada.com
2026-03-30 16:14:44
(6 months ago)
Web password guessing
Brute-Force
🇪🇸
10dencehispahard SL
2025-07-08 05:06:14
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇪🇸
10dencehispahard SL
2025-05-27 05:53:56
(1 year ago)
DDOS fasthttp
DDoS Attack
🇺🇸
TPI-Abuse
2025-02-15 00:54:38
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 166.1.131.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 19:54:32.093998 2025] [security2:error] [pid 18578:tid 18578] [client 166.1.131.224:47619] [client 166.1.131.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biketurtlehill.com"] [uri "/.env"] [unique_id "Z6_lyLdMQHIWBKdRKQha9wAAAAQ"], referer: https://tasamm.com/about/bbb46.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-28 07:50:04
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
