🇩🇪
Holger
2026-10-02 08:31:08
(2 days ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-09-30 04:06:04
(4 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇧🇷
radardatelecom
2026-09-29 22:26:02
(5 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-29 22:19:35
(5 days ago)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-29 22:05:31
(5 days ago)
Too many Status 40X (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 20:32:45
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 172.234.233.20 (172-234-233-20.ip.linodeusercon ...
show more
(mod_security) mod_security (id:210350) triggered by 172.234.233.20 (172-234-233-20.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:32:38.629744 2026] [security2:error] [pid 19005:tid 19005] [client 172.234.233.20:64069] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.blacksheepoffroad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.blacksheepoffroad.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "arwgZuUiu6QZzEwuBEI0nwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-09-29 20:06:10
(5 days ago)
Web App Attack Exploid from 172.234.233.20
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 20:04:55
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 172.234.233.20 (172-234-233-20.ip.linodeusercon ...
show more
(mod_security) mod_security (id:210350) triggered by 172.234.233.20 (172-234-233-20.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:04:50.022998 2026] [security2:error] [pid 15801:tid 15801] [client 172.234.233.20:56394] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||messengersforchrist.charity|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "messengersforchrist.charity"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "arwZ4l1QxbOhffzp1cTWGwAAAAM"], referer: www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-29 20:01:54
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-09-29 20:00:54
(5 days ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇩🇪
outputblog.de
2026-09-29 19:59:43
(5 days ago)
apache-wp-probephp
Port Scan
Hacking
Brute-Force
🇩🇪
macrob
2026-09-29 19:54:27
(5 days ago)
2026/09/29 19:54:26 [error] 796067#796067: *50228385 access forbidden by rule, client: 172.234.233.2 ...
show more
2026/09/29 19:54:26 [error] 796067#796067: *50228385 access forbidden by rule, client: 172.234.233.20, server: binixo.com, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0", host: "binixo.com", referrer: "www.google.com"
2026/09/29 19:54:26 [error] 796063#796063: *50204061 access forbidden by rule, client: 172.234.233.20, server: binixo.pl, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0", host: "binixo.pl", referrer: "www.google.com"
2026/09/29 19:54:26 [error] 796067#796067: *50228396 access forbidden by rule, client: 172.234.233.20, server: binixo.com, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0", host: "binixo.com", referrer: "www.google.com"
...
show less
Web App Attack
🇩🇪
Séfora Srl
2026-09-29 19:54:09
(5 days ago)
crowdsecurity/http-bad-user-agent detected by CrowdSec
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-29 19:44:50
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 172.234.233.20 (172-234-233-20.ip.linodeusercon ...
show more
(mod_security) mod_security (id:210350) triggered by 172.234.233.20 (172-234-233-20.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:44:47.710601 2026] [security2:error] [pid 22037:tid 22037] [client 172.234.233.20:63907] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bikiniadvice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bikiniadvice.com"] [uri "/wp-content/plugins/apikey/apikey.php.suspected"] [unique_id "arwVLw6WMFv3B2DUU3HcvAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
expandmade.com
2026-09-29 19:31:57
(5 days ago)
trolling for installation vulnerabilities [29/Sep/2026:19:31:57 "POST /wp-plain.php"]
Web App Attack
