🇺🇸
TPI-Abuse
2026-10-27 01:07:38
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:07:34.684111 2026] [security2:error] [pid 15598:tid 15598] [client 193.202.16.101:31365] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:07:34.684111 2026] [security2:error] [pid 15598:tid 15598] [client 193.202.16.101:31365] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/95-48-7.html"] [unique_id "at_5VoXI4WA2eC-39dp7OAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 17:12:17
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:12:11.265031 2026] [security2:error] [pid 29762:tid 29762] [client 193.202.16.101:33175] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 13:12:11.265031 2026] [security2:error] [pid 29762:tid 29762] [client 193.202.16.101:33175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||roguetechhub.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "roguetechhub.com"] [uri "/rogue-tech-talks-october-2019/"] [unique_id "atzm66AEyg09PZdvlsb4ZwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 08:30:57
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:30:52.623923 2026] [security2:error] [pid 15449:tid 15449] [client 193.202.16.101:52471] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:30:52.623923 2026] [security2:error] [pid 15449:tid 15449] [client 193.202.16.101:52471] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||butterfly-storm.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "butterfly-storm.org"] [uri "/grampa_menu.html"] [unique_id "atxsvKyZiToXgTPyqO3DQAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-20 14:22:52
(1 week ago)
Not following 301 redirects — wasted requests | method: HEAD | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Bad Web Bot
🇬🇧
consul.to
2026-10-07 12:50:55
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
drewf.ink
2026-05-08 04:43:11
(5 months ago)
[04:43] Port scanning. Port(s) scanned: TCP/800
Port Scan
🇺🇸
TPI-Abuse
2026-03-09 22:28:03
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 18:27:57.431617 2026] [security2:error] [pid 25380:tid 25380] [client 193.202.16.101:47131] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 18:27:57.431617 2026] [security2:error] [pid 25380:tid 25380] [client 193.202.16.101:47131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||holistichealth4u2.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "holistichealth4u2.com"] [uri "/"] [unique_id "aa9JbdFgIBTdrd4dSA2iMQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-09 21:00:53
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 17:00:49.515732 2026] [security2:error] [pid 11573:tid 11573] [client 193.202.16.101:19851] ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 17:00:49.515732 2026] [security2:error] [pid 11573:tid 11573] [client 193.202.16.101:19851] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.televisonic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.televisonic.com"] [uri "/wp"] [unique_id "aa81ATxW4lWWk3G7GVnaYgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-02-09 05:09:14
(8 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇦🇺
afleventoffice.com.au
2026-02-07 11:50:53
(8 months ago)
POST /xmlrpc.php HTTP/1.1
Web App Attack
2025-12-17 23:39:41
(10 months ago)
Forum/form spam
Web Spam
2025-11-27 00:08:53
(11 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-08.193.202.16.101.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇺🇸
TPI-Abuse
2025-11-09 21:57:24
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 16:57:20.288092 2025] [security2:error] [pid 29161:tid 29161] [client 193.202.16.101:49835] ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 16:57:20.288092 2025] [security2:error] [pid 29161:tid 29161] [client 193.202.16.101:49835] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aREOQLFLEGbExSKJZ2wo_QAAAAY"], referer: https://jolankagroup.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 19:47:08
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 15:47:01.334239 2025] [security2:error] [pid 6749:tid 6749] [client 193.202.16.101:59137] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.16.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 15:47:01.334239 2025] [security2:error] [pid 6749:tid 6749] [client 193.202.16.101:59137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||justiart.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "justiart.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQEdtTGMqdyXJ_WqbDy09wAAAAo"], referer: https://justiart.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-11 09:00:08
(1 year ago)
Forum/form spam
Web Spam
