🇺🇸
TPI-Abuse
2026-11-07 12:55:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 181.199.58.7 (host-181-199-58-7.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:55:39.964627 2026] [security2:error] [pid 15024:tid 15024] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 181.199.58.7 (host-181-199-58-7.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:55:39.964627 2026] [security2:error] [pid 15024:tid 15024] [client 181.199.58.7:5324] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||beach98.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "beach98.com"] [uri "/"] [unique_id "au8fy26fYDn42Vw-Od4zDwAAAAk"], referer: https://greatwebmaker.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:25:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 181.199.58.7 (host-181-199-58-7.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:25:37.513917 2026] [security2:error] [pid 28059:tid 28059] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 181.199.58.7 (host-181-199-58-7.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:25:37.513917 2026] [security2:error] [pid 28059:tid 28059] [client 181.199.58.7:47394] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "auWmAcczZLPR-ElxLmAKTQAAAAI"], referer: https://cbcfargo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
pavel Karpenko
2026-10-26 17:34:33
UTC ·
(1 week ago)
181.199.58.7 - - [26/Oct/2026:20:34:33 +0300] "GET /property_lir.php?id=no.telio&tab=overview&lang=pl HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" client ...
show more
181.199.58.7 - - [26/Oct/2026:20:34:33 +0300] "GET /property_lir.php?id=no.telio&tab=overview&lang=pl HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" client_port=62216 server_port=443 rt=0.000 urt=- transfer_entry=- server_addr=195.133.18.6 epoch=1793036073.443
show less
DDoS Attack
2026-10-24 04:06:04
UTC ·
(2 weeks ago)
Search protection: facets on category: 7 values in one group (limit 3) / reCAPTCHA challenge timed out
Bad Web Bot
🇩🇪
LRob
2026-09-29 19:15:38
UTC ·
(1 month ago)
Shop search flood (L7 DDoS) | path: /72-velo-gravel-sport | query: q=Taille-M-L/Famille-Terra | src_port: 9962
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 03:15:52
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 181.199.58.7 (host-181-199-58-7.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 23:15:45.391300 2026] [security2:error] [pid 23155:tid 23155] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 181.199.58.7 (host-181-199-58-7.ecua.net.ec): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 23:15:45.391300 2026] [security2:error] [pid 23155:tid 23155] [client 181.199.58.7:45727] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fedeoliva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fedeoliva.com"] [uri "/"] [unique_id "ariKYdKBRmyqa_rRnwuUNQAAAAo"], referer: https://drcheckerfree.online/dir/outreach-link-building-71159
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-09-27 03:13:49
UTC ·
(1 month ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-08-26 20:14:03
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-26 19:41:09
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2025-11-19 11:42:22
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇨🇭
backslash
2025-11-14 02:16:30
UTC ·
(11 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
2025-02-05 02:03:10
UTC ·
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
2025-01-24 01:56:10
UTC ·
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇿🇦
IrisFlower
2021-05-12 01:25:59
UTC ·
(5 years ago)
Unauthorized connection attempt detected from IP address 181.199.58.7 to port 5555 [J]
Port Scan
Hacking
🇿🇦
IrisFlower
2021-04-13 02:57:14
UTC ·
(5 years ago)
Unauthorized connection attempt detected from IP address 181.199.58.7 to port 5555 [J]
Port Scan
Hacking
