🇩🇪
bescared
2026-11-15 16:19:09
UTC ·
(5 hours ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 03:25:36
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:25:31.545636 2026] [security2:error] [pid 8469:tid 8521] [client 185.61.217.15:32123] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:25:31.545636 2026] [security2:error] [pid 8469:tid 8521] [client 185.61.217.15:32123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/uterminologyp874379"] [unique_id "avkmK-0LW9iFSUdvTbYJXgAAAYg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 06:00:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:00:13.570275 2026] [security2:error] [pid 6826:tid 6826] [client 185.61.217.15:54555] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:00:13.570275 2026] [security2:error] [pid 6826:tid 6826] [client 185.61.217.15:54555] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ofertasdetrabajosyempleos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ofertasdetrabajosyempleos.com"] [uri "/espana/buscador-ingeniero-alicante.php"] [unique_id "avf47Rw57ANZbcgqio2EYAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-13 16:38:57
UTC ·
(2 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /round-bar-stool-cushions/elasticized-round-barstool-cover-seat-cushion-counter-stool/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1 ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /round-bar-stool-cushions/elasticized-round-barstool-cover-seat-cushion-counter-stool/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 | 2026-11-13 16:38 UTC
show less
Bad Web Bot
🇺🇸
Zandro
2026-11-12 04:00:14
UTC ·
(3 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 23:03:30
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:03:24.623561 2026] [security2:error] [pid 24693:tid 24693] [client 185.61.217.15:17611] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:03:24.623561 2026] [security2:error] [pid 24693:tid 24693] [client 185.61.217.15:17611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/source/source/helpers/source/helpers/jquery.fancybox-thumbs.css"] [unique_id "avT0PL54dQInnJeN_G4ixQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-10 04:21:49
UTC ·
(5 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /concours-de-petanque/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-03 04:02:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:02:03.348846 2026] [security2:error] [pid 26190:tid 26190] [client 185.61.217.15:52965] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:02:03.348846 2026] [security2:error] [pid 26190:tid 26190] [client 185.61.217.15:52965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fundaciondamashcc.org.ec|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fundaciondamashcc.org.ec"] [uri "/centro-medico-duran/"] [unique_id "aulcuxbzuw0tW-y9vqSZwwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 13:54:59
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 09:54:55.001012 2026] [security2:error] [pid 21008:tid 21022] [client 185.61.217.15:50293] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 09:54:55.001012 2026] [security2:error] [pid 21008:tid 21022] [client 185.61.217.15:50293] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howsyourlife.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howsyourlife.org"] [uri "/home/2019/10/04/thought-for-october-4th-i-warn-you/"] [unique_id "auXzLnFlC8BfsZA_dUtuggAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 06:28:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:28:16.412731 2026] [security2:error] [pid 8161:tid 8161] [client 185.61.217.15:31613] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.61.217.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 02:28:16.412731 2026] [security2:error] [pid 8161:tid 8161] [client 185.61.217.15:31613] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/general-news/rotary-club-of-forest-grove-wreath-sale-2022/"] [unique_id "auWKgMRTyzJUzq6VQUmGPwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
island-freaks.com
2026-09-15 05:38:54
UTC ·
(2 months ago)
Attack Type: WordPress Exploit Bot attempt on /photo/113997/ | DNS 185.61.217.15 | Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:138.0) Gecko/20100101 Firefox/138.0
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
Ilop
2026-09-08 18:30:13
UTC ·
(2 months ago)
[hp-100] 19 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
Port Scan
🇺🇸
oralunal
2026-05-19 18:08:27
UTC ·
(5 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-26 13:21:00
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇫🇷
SpaceHost-Server
2026-03-03 23:43:18
UTC ·
(8 months ago)
Brute-Force
Web App Attack
