🇺🇸
TPI-Abuse
2026-11-07 10:48:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 190.3.40.168 (190.3.40.168.static.techtelnet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:48:46.793888 2026] [security2:error] [pid 22907:tid 22907 ...
show more
(mod_security) mod_security (id:210350) triggered by 190.3.40.168 (190.3.40.168.static.techtelnet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:48:46.793888 2026] [security2:error] [pid 22907:tid 22907] [client 190.3.40.168:49109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||donutlocations.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "donutlocations.com"] [uri "/"] [unique_id "au8CDj3H59QS05paaML4eQAAAAY"], referer: https://donutlocations.com/beignets-denville.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 08:19:43
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 190.3.40.168 (190.3.40.168.static.techtelnet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:19:39.458851 2026] [security2:error] [pid 19295:tid 19295 ...
show more
(mod_security) mod_security (id:210350) triggered by 190.3.40.168 (190.3.40.168.static.techtelnet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:19:39.458851 2026] [security2:error] [pid 19295:tid 19295] [client 190.3.40.168:26290] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jonathanwilson.me|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jonathanwilson.me"] [uri "/"] [unique_id "au7fG5SHPZfi08gLod6jUQAAAAI"], referer: https://copperika.com/all/1544/16.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 05:49:24
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 190.3.40.168 (190.3.40.168.static.techtelnet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 00:49:21.106140 2026] [security2:error] [pid 8940:tid 8940] ...
show more
(mod_security) mod_security (id:210350) triggered by 190.3.40.168 (190.3.40.168.static.techtelnet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 00:49:21.106140 2026] [security2:error] [pid 8940:tid 8940] [client 190.3.40.168:32213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||smilingorc.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "smilingorc.com"] [uri "/"] [unique_id "au674RwADSwSJxkLM1Kt5QAAAAo"], referer: https://vagonite.com/all/2667/6.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-10-24 02:29:05
UTC ·
(2 weeks ago)
WooCommerce YITH AJAX Filder product_cat filter flood attempt with taxonomies
DDoS Attack
Bad Web Bot
🇫🇷
Sklurk
2026-08-25 10:52:11
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
Zandro
2026-08-07 21:00:14
UTC ·
(3 months ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
2025-11-18 04:24:52
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
2025-11-15 14:30:23
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇹🇷
rtbh.com.tr
2025-08-24 20:08:24
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-08-24 00:08:24
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
SpaceHost-Server
2025-08-23 22:44:44
UTC ·
(1 year ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-08-23 20:08:24
UTC ·
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
SpaceHost-Server
2025-08-22 22:38:24
UTC ·
(1 year ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2025-08-22 14:12:24
UTC ·
(1 year ago)
2025/08/22 14:12:22 [error] 872661#872661: *116821028 access forbidden by rule, client: 190.3.40.168, server: binixo.com.ar, request: "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.7 HTTP/2.0", host: "binixo.com.ar", referrer: "https: ...
show more
2025/08/22 14:12:22 [error] 872661#872661: *116821028 access forbidden by rule, client: 190.3.40.168, server: binixo.com.ar, request: "GET /wp-includes/css/dist/block-library/style.min.css?ver=5.3.7 HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/"
2025/08/22 14:12:22 [error] 872657#872657: *116821030 access forbidden by rule, client: 190.3.40.168, server: binixo.com.ar, request: "GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.9.1 HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/"
2025/08/22 14:12:22 [error] 872657#872657: *116821031 access forbidden by rule, client: 190.3.40.168, server: binixo.com.ar, request: "GET /wp-content/plugins/cookie-notice/css/front.min.css?ver=5.3.7 HTTP/2.0", host: "binixo.com.ar", referrer: "https://binixo.com.ar/"
...
show less
Web App Attack
