🇺🇸
TPI-Abuse
2026-11-15 04:35:39
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 23:35:35.269162 2026] [security2:error] [pid 11716:tid 11716] [client 193.202.80.67:50499] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 23:35:35.269162 2026] [security2:error] [pid 11716:tid 11716] [client 193.202.80.67:50499] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dannyvanryswyk.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dannyvanryswyk.com"] [uri "/the-tell-tale-heart.html"] [unique_id "avk2l5F6JBFE_Rp0eESItwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:32:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:32:11.365809 2026] [security2:error] [pid 30621:tid 30621] [client 193.202.80.67:43559] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:32:11.365809 2026] [security2:error] [pid 30621:tid 30621] [client 193.202.80.67:43559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jessicalevant.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jessicalevant.com"] [uri "/blog/2010/04/26/three-new-abstracts/"] [unique_id "avhGuyCqkjob_gxNTg7AcQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 08:22:11
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:22:08.242057 2026] [security2:error] [pid 30214:tid 30214] [client 193.202.80.67:16425] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:22:08.242057 2026] [security2:error] [pid 30214:tid 30214] [client 193.202.80.67:16425] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/js/source/source/css/estilos.css"] [unique_id "avgaMA_1Hd2eCFw_Z_HzcwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 14:23:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:23:33.012928 2026] [security2:error] [pid 20668:tid 20668] [client 193.202.80.67:40663] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:23:33.012928 2026] [security2:error] [pid 20668:tid 20668] [client 193.202.80.67:40663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/wp/v2/pages/110"] [unique_id "au3i5Uevm3K_30zOtDpcxgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-05 00:30:47
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 15:06:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:06:09.920199 2026] [security2:error] [pid 24620:tid 24620] [client 193.202.80.67:55309] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:06:09.920199 2026] [security2:error] [pid 24620:tid 24620] [client 193.202.80.67:55309] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||campnecon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "campnecon.com"] [uri "/uncategorized/legendary-change-moore-usurps-bissette-in-epic-clash-of-bearded-titans/"] [unique_id "auNg4bK2HYQ4Ji89RBvQRQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:33:33
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:33:28.083136 2026] [security2:error] [pid 14384:tid 14384] [client 193.202.80.67:31683] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.80.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:33:28.083136 2026] [security2:error] [pid 14384:tid 14384] [client 193.202.80.67:31683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.steveyett.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.steveyett.com"] [uri "/pool1.htm"] [unique_id "atJDyJiSY-Clqn9Oh9gKXwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-08 16:27:48
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2025-10-11 11:52:33
UTC ·
(1 year ago)
193.202.80.67 - - [11/Oct/2025:14:52:30 +0300] "POST /wp-content/plugins/wp-payeezy-pay/donate.php HTTP/1.1" 404 2815 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇦
URAN Publishing Service
2025-10-11 02:24:58
UTC ·
(1 year ago)
193.202.80.67 - - [11/Oct/2025:05:24:57 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 2845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:78.0) Gecko/20100101 Firefox/78.0"
...
Web App Attack
🇺🇦
URAN Publishing Service
2025-10-11 01:44:43
UTC ·
(1 year ago)
193.202.80.67 - - [11/Oct/2025:04:44:40 +0300] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 2811 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0"
...
Web App Attack
🇺🇦
URAN Publishing Service
2025-10-10 17:48:16
UTC ·
(1 year ago)
193.202.80.67 - - [10/Oct/2025:20:48:15 +0300] "GET /wp-content/plugins/wp-symposium/readme.txt HTTP/1.1" 404 2844 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36"
...
Web App Attack
🇺🇦
URAN Publishing Service
2025-10-10 13:11:25
UTC ·
(1 year ago)
193.202.80.67 - - [10/Oct/2025:16:10:21 +0300] "GET /wp-content/plugins/navis-documentcloud/readme.txt HTTP/1.1" 404 2825 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
193. ...
show more
193.202.80.67 - - [10/Oct/2025:16:10:21 +0300] "GET /wp-content/plugins/navis-documentcloud/readme.txt HTTP/1.1" 404 2825 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
193.202.80.67 - - [10/Oct/2025:16:11:22 +0300] "GET /wp-content/plugins/navis-documentcloud/readme.txt HTTP/1.1" 404 2829 "-" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
...
show less
Web App Attack
