🇫🇮
tjs
2026-05-07 08:55:00
(1 month ago)
web attack, SQL injection attempt
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-11-21 16:35:01
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 193.202.81.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.81.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 11:34:55.584377 2025] [security2:error] [pid 18818:tid 18818] [client 193.202.81.161:19203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||drwolberg.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "drwolberg.com"] [uri "/"] [unique_id "aSCUr8TWE-vdH4ZYjC7pdwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-21 15:39:02
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 193.202.81.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.81.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 10:38:56.732299 2025] [security2:error] [pid 325:tid 325] [client 193.202.81.161:12185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||higginskids.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "higginskids.com"] [uri "/"] [unique_id "aSCHkM-bZ5t_gA6o915T1gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 17:34:08
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 193.202.81.161 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.81.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 15 12:34:03.985089 2025] [security2:error] [pid 3449152:tid 3449152] [client 193.202.81.161:39889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tiley.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tiley.net"] [uri "/"] [unique_id "aRi5i0KTlh7UsxYM9NgOgQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-08-14 10:51:35
(10 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.202.81.161
2025-08-14T11:56:22+02 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.202.81.161
2025-08-14T11:56:22+02:00 vpn Access-Reject 'ewein' station: 193.202.81.161 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
Hobby Bob
2024-09-26 09:20:27
(1 year ago)
Sep 26 10:20:27 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 3 secs): user=, ...
show more
Sep 26 10:20:27 server dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=193.202.81.161, lip=X.X.X.X session=
show less
Port Scan
Hacking
2023-11-18 18:58:32
(2 years ago)
opencart admin attack from fail2ban
...
DDoS Attack
Brute-Force
SSH
🇨🇭
backslash
2021-02-22 04:17:09
(5 years ago)
Brute-Force