🇺🇸
TPI-Abuse
2026-10-28 21:37:22
(33 minutes ago)
(mod_security) mod_security (id:210350) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:37:18.580220 2026] [security2:error] [pid 14210:tid 14210] [client 193.202.14.45:55525] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:37:18.580220 2026] [security2:error] [pid 14210:tid 14210] [client 193.202.14.45:55525] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.drgas.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.drgas.com"] [uri "/DR-GAS-LITTLE-BOSS-4-TRAP-BOOM-TUBE-TIP_p_63.html"] [unique_id "auJrDuCGH6dWwDB9W6vGSAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 17:19:50
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:19:47.189043 2026] [security2:error] [pid 24997:tid 25063] [client 193.202.14.45:51057] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:19:47.189043 2026] [security2:error] [pid 24997:tid 25063] [client 193.202.14.45:51057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tkfay.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tkfay.com"] [uri "/2014/"] [unique_id "atzos58bLfO5QQ_ovCfUxQAAAYk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 06:54:41
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:54:38.652824 2026] [security2:error] [pid 28293:tid 28293] [client 193.202.14.45:39473] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 02:54:38.652824 2026] [security2:error] [pid 28293:tid 28293] [client 193.202.14.45:39473] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hvacmechanalysis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hvacmechanalysis.com"] [uri "/services/vibration-analysis/"] [unique_id "atxWLmgfcnoF04Z768FjiQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-04-26 23:04:43
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 19:04:39.670300 2026] [security2:error] [pid 2287:tid 2287] [client 193.202.14.45:25009] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 19:04:39.670300 2026] [security2:error] [pid 2287:tid 2287] [client 193.202.14.45:25009] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pyxelstudios.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pyxelstudios.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ae6aB1KXQvd0lNY9qSCTiAAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-20 02:53:45
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 22:53:40.852640 2026] [security2:error] [pid 3863290:tid 3863290] [client 193.202.14.45:1783 ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 22:53:40.852640 2026] [security2:error] [pid 3863290:tid 3863290] [client 193.202.14.45:17833] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeWVNEsR8xhYQ1R90f0cMAAAABo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 18:52:58
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 14:52:54.284146 2026] [security2:error] [pid 3585301:tid 3585301] [client 193.202.14.45:6082 ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 14:52:54.284146 2026] [security2:error] [pid 3585301:tid 3585301] [client 193.202.14.45:60823] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||clowaterart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "clowaterart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad_ehtN7fgP01bA31UVztQAAACQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
pamircil
2025-12-23 12:11:07
(10 months ago)
🍯 WinnieThePooh Honeypot : GET request to '/wp-config.txt' on (http/80)💀
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-03-04 10:07:34
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 05:07:26.483800 2025] [security2:error] [pid 18764:tid 18764] [client 193.202.14.45:61835] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 193.202.14.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 05:07:26.483800 2025] [security2:error] [pid 18764:tid 18764] [client 193.202.14.45:61835] [client 193.202.14.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.holgerfeld.com"] [uri "/.env"] [unique_id "Z8bQ3rj0o_RvA8_O6pJ7xQAAAB4"], referer: https://tasamm.com/about/ggg100.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-22 03:30:07
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
