🇺🇸
TPI-Abuse
2026-11-09 08:35:01
UTC ·
(52 minutes ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:34:52.889255 2026] [security2:error] [pid 21580:tid 21580] [client 193.202.87.32:40965] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:34:52.889255 2026] [security2:error] [pid 21580:tid 21580] [client 193.202.87.32:40965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.disio.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.disio.com"] [uri "/russiancupid-sign-in-2/with-one-path-in-2012-considerably-appropriate/"] [unique_id "avGFrOsxQxlX6D5Uk3hr_QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 00:03:09
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:03:02.278196 2026] [security2:error] [pid 1380:tid 1380] [client 193.202.87.32:48953] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:03:02.278196 2026] [security2:error] [pid 1380:tid 1380] [client 193.202.87.32:48953] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/stats/statistic55.html"] [unique_id "au0ZNtcWp3dbK2OCZ6vv9QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 03:32:15
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:32:08.331951 2026] [security2:error] [pid 14023:tid 14023] [client 193.202.87.32:9181] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:32:08.331951 2026] [security2:error] [pid 14023:tid 14023] [client 193.202.87.32:9181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/loveandlogic-value-hard-work/"] [unique_id "auv4uEcokC01yHCGrtP0sAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-31 02:24:11
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 16:23:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 12:23:51.693615 2026] [security2:error] [pid 32612:tid 32612] [client 193.202.87.32:40057] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 12:23:51.693615 2026] [security2:error] [pid 32612:tid 32612] [client 193.202.87.32:40057] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dipseanet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dipseanet.com"] [uri "/index.htm"] [unique_id "auDQF6yUnu8b4XG5fZGo-AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
C C
2026-08-09 22:05:19
UTC ·
(2 months ago)
Distributed scraping attack: 1662 req from 1572 rotating proxy IPs | this IP: 1 req, 1 blocked
Open Proxy
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-07-21 01:55:10
UTC ·
(3 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇮🇩
hermawan
2026-06-09 09:23:30
UTC ·
(5 months ago)
1780997004.017556 193.202.87.32 103.166.156.58 46720_2-4-8-1-3_1460_11 2026-06-09 16:23:24 WIB
...
Email Spam
Hacking
🇩🇪
kjaerulff
2026-05-18 11:35:24
UTC ·
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 02:07:40
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 22:07:33.305600 2026] [security2:error] [pid 10685:tid 10713] [client 193.202.87.32:63021] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 22:07:33.305600 2026] [security2:error] [pid 10685:tid 10713] [client 193.202.87.32:63021] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||transitionalcareservices.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "transitionalcareservices.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afvz5WbCIEQtl9c_37FxogAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 14:43:51
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 10:43:44.197415 2026] [security2:error] [pid 5428:tid 5441] [client 193.202.87.32:34019] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 10:43:44.197415 2026] [security2:error] [pid 5428:tid 5441] [client 193.202.87.32:34019] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||laradioactivitat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laradioactivitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afNqoLgFwf2Zs7I1pN0t-gAAAYc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 04:30:15
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 00:30:10.850452 2026] [security2:error] [pid 31227:tid 31227] [client 193.202.87.32:55341] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 00:30:10.850452 2026] [security2:error] [pid 31227:tid 31227] [client 193.202.87.32:55341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||emgeorge.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "emgeorge.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afGJUsTUvTF8fiSFXMC4DAAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 11:33:25
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 07:33:18.900277 2026] [security2:error] [pid 1795000:tid 1795000] [client 193.202.87.32:3739 ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.87.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 07:33:18.900277 2026] [security2:error] [pid 1795000:tid 1795000] [client 193.202.87.32:37391] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cdromline.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cdromline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad4l_h2P6wsdXUpPYNSKrgAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-16 14:08:57
UTC ·
(1 year ago)
IM360 WAF: Information Disclosure Attempt in WordPress MV:/wp-config.bak
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-24 11:17:04
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
