π¨πΏ
lp
2026-09-28 12:23:06
(6 hours ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 188.132.249.111
2026-09-28T13:07:06+0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 188.132.249.111
2026-09-28T13:07:06+02:00 vpn Access-Reject 'xhejj05' station: 188.132.249.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-27 12:16:03
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 08:15:52.588719 2026] [security2:error] [pid 27750:tid 27750] [client 188.132.249.111:51068] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joebankx.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joebankx.com"] [uri "/"] [unique_id "arkI-H_HVN_XBy5EPIChUQAAAAI"], referer: https://bestlinkchecker.online/dir/powerful-link-building-107800
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-27 07:36:42
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 03:36:33.929042 2026] [security2:error] [pid 6188:tid 6188] [client 188.132.249.111:55182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||topgunsecurityservice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "topgunsecurityservice.com"] [uri "/"] [unique_id "arjHgfJR59yxsr9bCA4PwwAAAC0"], referer: https://dacheckertoolfree.site/dir/quality-backlink-services-215466
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
FeG Deutschland
2026-09-27 06:34:45
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28
Exploited Host
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-22 23:27:41
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 19:27:36.964394 2026] [security2:error] [pid 11589:tid 11589] [client 188.132.249.111:60596] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||harrisonwilde.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "harrisonwilde.com"] [uri "/"] [unique_id "arMO6Pq9LQ1NScimyGL-JAAAABc"], referer: https://dapacheckerguest.online/dir/strong-domain-backlinks-89470
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
kosada.com
2026-09-22 16:24:27
(6 days ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=60&topics%5B1%5D=33&topics%5B2%5D=49&topics%5B3%5D=57 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
πΊπΈ
ι¬Όε½±233
2026-09-20 09:15:19
(1 week ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
show less
Bad Web Bot
2026-09-19 20:14:37
(1 week ago)
Botnet flood DDOS activity
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-18 18:05:26
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 14:05:21.748989 2026] [security2:error] [pid 19349:tid 19349] [client 188.132.249.111:56320] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||musekisses.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "musekisses.com"] [uri "/"] [unique_id "aq19YZpjp52GSjy2mroxeAAAAAE"], referer: https://bulkbacklinkanalysis.store/dir/professional-backlink-building-142154
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
el-brujo
2026-09-18 14:38:00
(1 week ago)
HTTP DDoS Attack Layer 7
DDoS Attack
π¨π
backslash
2026-09-17 21:42:01
(1 week ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-09-17 00:12:12
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:12:05.388965 2026] [security2:error] [pid 17425:tid 17425] [client 188.132.249.111:40598] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.proprocessor.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.proprocessor.com"] [uri "/patty-makers.htm"] [unique_id "aqswVY08XMwVxrrpLSsvjQAAAAc"], referer: https://domaindachecker.space/dir/trusted-link-building-88519
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
Sklurk
2026-09-16 11:45:00
(1 week ago)
Web App Attack
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-16 10:49:54
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 188.132.249.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:49:47.472589 2026] [security2:error] [pid 32463:tid 32463] [client 188.132.249.111:13086] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pulsepowermeter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pulsepowermeter.com"] [uri "/"] [unique_id "aqp0S3sfDpxT-zF4H5Sw_AAAAAw"], referer: https://freewebsitechecker.online/dir/organic-seo-links-168813
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
librebit
2026-09-15 13:16:50
(1 week ago)
Brute force
Brute-Force
