🇫🇷
Sklurk
2026-11-07 00:20:55
UTC ·
(11 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:51:39
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:51:33.893621 2026] [security2:error] [pid 20355:tid 20355] [client 193.202.87.88:19129] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:51:33.893621 2026] [security2:error] [pid 20355:tid 20355] [client 193.202.87.88:19129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.g-peopleland.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.g-peopleland.com"] [uri "/DW-9550 BPM.htm"] [unique_id "auk-JYSlxRw1jeyMVuQkOAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 09:40:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:40:25.441174 2026] [security2:error] [pid 17552:tid 17552] [client 193.202.87.88:25815] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:40:25.441174 2026] [security2:error] [pid 17552:tid 17552] [client 193.202.87.88:25815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.microdot.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.microdot.net"] [uri "/nlp/learning-strategy/"] [unique_id "auHDCSgZZOA7--MomhpR9gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 00:34:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:34:02.928201 2026] [security2:error] [pid 5497:tid 5497] [client 193.202.87.88:61191] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:34:02.928201 2026] [security2:error] [pid 5497:tid 5497] [client 193.202.87.88:61191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/df27e5fc4ce0012a862566c50014e89a"] [unique_id "at_xem82EOhBitxwwooh6QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 07:20:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:20:04.813233 2026] [security2:error] [pid 23831:tid 23831] [client 193.202.87.88:40539] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:20:04.813233 2026] [security2:error] [pid 23831:tid 23831] [client 193.202.87.88:40539] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||weirdlovemakers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "weirdlovemakers.com"] [uri "/sounds.html"] [unique_id "atxcJDR1B9-JpW51Vmb4yQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-23 14:13:02
UTC ·
(2 weeks ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
aranguren.org
2026-10-10 11:08:39
UTC ·
(4 weeks ago)
193.202.87.88 - - [10/Oct/2026:22:08:38 +1100] "GET /api/config HTTP/1.1" 404 986 "-" "TH-survey/1.1 (passive lightning research census; GET-only)"
193.202.87.88 - - [10/Oct/2026:22:08:38 +1100] "GET /thub/api/config HTTP/1.1" 404 986 "-" "TH-survey/ ...
show more
193.202.87.88 - - [10/Oct/2026:22:08:38 +1100] "GET /api/config HTTP/1.1" 404 986 "-" "TH-survey/1.1 (passive lightning research census; GET-only)"
193.202.87.88 - - [10/Oct/2026:22:08:38 +1100] "GET /thub/api/config HTTP/1.1" 404 986 "-" "TH-survey/1.1 (passive lightning research census; GET-only)"
193.202.87.88 - - [10/Oct/2026:22:08:38 +1100] "GET /rtl/ HTTP/1.1" 404 986 "-" "TH-survey/1.1 (passive lightning research census; GET-only)"
...
show less
Bad Web Bot
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 04:51:14
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 193.202.87.88
2026-09-10T06:25:36+02:00 vpn Access-Reject 'kyigit' station: 193.202.87.88 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 193.202.87.88
2026-09-10T06:25:36+02:00 vpn Access-Reject 'kyigit' station: 193.202.87.88 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
C C
2026-08-06 22:54:49
UTC ·
(3 months ago)
Distributed scraping attack: 3436 req from 3224 rotating proxy IPs, waves of up to 156 req in 138s on a single URL | this IP: 1 req, 1 blocked
Bad Web Bot
Web App Attack
2026-07-23 04:00:51
UTC ·
(3 months ago)
PARMACOM WEBEXPLOIT 193.202.87.88 (193.202.87.88)
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-26 00:15:22
UTC ·
(4 months ago)
[Fri Jun 26 10:15:22.000464 2026] [security2:error] [pid 594152] [client 193.202.87.88:12593] [client 193.202.87.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Fri Jun 26 10:15:22.000464 2026] [security2:error] [pid 594152] [client 193.202.87.88:12593] [client 193.202.87.88] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aj3EmVPn7oYHjXR4KbH0DQAAAA4"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-02-16 10:23:18
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 16 05:23:12.167803 2025] [security2:error] [pid 13437:tid 13437] [client 193.202.87.88:29479] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 193.202.87.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 16 05:23:12.167803 2025] [security2:error] [pid 13437:tid 13437] [client 193.202.87.88:29479] [client 193.202.87.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brainstormer.soy"] [uri "/.env"] [unique_id "Z7G8kNvGD-DIn7MF2LHwdAAAAAs"], referer: https://tasamm.com/about/bbb77.html
show less
Brute-Force
Bad Web Bot
Web App Attack
2021-05-28 15:45:00
UTC ·
(5 years ago)
Credential Stuffing
Brute-Force
