🇺🇸
TPI-Abuse
2026-10-28 09:24:08
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 187.102.205.19 (host-187-102-205-19.enlacewifi. ...
show more
(mod_security) mod_security (id:210350) triggered by 187.102.205.19 (host-187-102-205-19.enlacewifi.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:24:04.874883 2026] [security2:error] [pid 3368:tid 3368] [client 187.102.205.19:53754] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rotorservice.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rotorservice.com"] [uri "/"] [unique_id "auG_NHYNDhFWoFv62nAUFQAAAAU"], referer: https://linksdirectory.net/link-profile/gentetic.com/d679a4e1673b56ec0b9c6d2ebda34f98
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-26 21:06:13
(1 day ago)
Proxynvader botnet: code forge crawl | path: /Shieldlist/shieldlist-agent/src/commit/359d96632be6158 ...
show more
Proxynvader botnet: code forge crawl | path: /Shieldlist/shieldlist-agent/src/commit/359d96632be6158ce0c037720e53afb807e5ae55/CONTRIBUTING.md | src_port: 51292 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-23 10:45:34
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 187.102.205.19 (host-187-102-205-19.enlacewifi. ...
show more
(mod_security) mod_security (id:210350) triggered by 187.102.205.19 (host-187-102-205-19.enlacewifi.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:45:26.701385 2026] [security2:error] [pid 543:tid 543] [client 187.102.205.19:59156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vjrott.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vjrott.com"] [uri "/patandmat.com/index.html"] [unique_id "ats6xoIT7azKyhWAUJavQQAAAAY"], referer: https://ajetology.blogspot.com/2020/01/an-introduction.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 06:59:26
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 187.102.205.19 (host-187-102-205-19.enlacewifi. ...
show more
(mod_security) mod_security (id:210350) triggered by 187.102.205.19 (host-187-102-205-19.enlacewifi.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 02:59:20.735202 2026] [security2:error] [pid 13097:tid 13097] [client 187.102.205.19:40088] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||patrickmedd.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "patrickmedd.com"] [uri "/images"] [unique_id "aq4yyDh_4Lr_IsAGoc7SrwAAAAc"], referer: https://patrickmedd.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-03 13:40:15
(2 months ago)
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ...
show more
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763247600/cat_ids~189,192/tag_ids~596,274,757,680,536,417,631,230,593/request_format~json/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36
show less
DDoS Attack
Web App Attack
🇺🇸
SiliSoftware
2026-01-09 08:01:45
(9 months ago)
/phpBB3/memberlist.php?mode=viewprofile&u=1598&sid=460a3295da8a48620a7ce656f1620e53
Web App Attack
2025-11-30 17:33:11
(10 months ago)
botnet
DDoS Attack
2025-11-25 04:52:23
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-20 20:24:28
(11 months ago)
scanning http requests from known botnet
Web App Attack
