2026-11-13 05:27:36
UTC ·
(2 days ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:05:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:05:38.253769 2026] [security2:error] [pid 9659:tid 9659] [client 193.202.9.56:20531] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:05:38.253769 2026] [security2:error] [pid 9659:tid 9659] [client 193.202.9.56:20531] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.grupo-visalud.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.grupo-visalud.com"] [uri "/2024/06/bahsegel-bahis-linki-turkiye-nin-en-guvenilir-2/"] [unique_id "avCd0n7kVaPaJfbAc6lWRAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 02:53:02
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:52:54.723851 2026] [security2:error] [pid 9276:tid 9276] [client 193.202.9.56:43355] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:52:54.723851 2026] [security2:error] [pid 9276:tid 9276] [client 193.202.9.56:43355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fundingworkingcapital.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fundingworkingcapital.com"] [uri "/"] [unique_id "auQGhkSjiXXhrKRTVybB7gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:37:08
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:36:56.318880 2026] [security2:error] [pid 14069:tid 14096] [client 193.202.9.56:19349] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:36:56.318880 2026] [security2:error] [pid 14069:tid 14096] [client 193.202.9.56:19349] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||maestrosoler.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "maestrosoler.com"] [uri "/recital_programs.htm"] [unique_id "atDlCKdSN9CMwEmOZthYKQAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-11 16:27:00
UTC ·
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-09-23 13:37:17
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-09-21 19:23:56
UTC ·
(1 month ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-09 06:55:46
UTC ·
(2 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-07 02:06:43
UTC ·
(2 months ago)
Brute force
Brute-Force
🇨🇭
backslash
2026-08-13 01:57:00
UTC ·
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-16 23:18:57
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:18:50.421472 2026] [security2:error] [pid 14244:tid 14244] [client 193.202.9.56:33201] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 19:18:50.421472 2026] [security2:error] [pid 14244:tid 14244] [client 193.202.9.56:33201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||summithost.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "summithost.com"] [uri "/wp-json/wp/v2/users"] [unique_id "allm2uZoiyO2fJRi7GC8dQAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-08-20 23:58:55
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 193.202.9.56 (IL/Israel/-): 1 in the last 3600 secs
Web App Attack
🇺🇸
TPI-Abuse
2025-03-10 01:12:25
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 21:12:18.085469 2025] [security2:error] [pid 9762:tid 9762] [client 193.202.9.56:47131] [clie ...
show more
(mod_security) mod_security (id:210492) triggered by 193.202.9.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 21:12:18.085469 2025] [security2:error] [pid 9762:tid 9762] [client 193.202.9.56:47131] [client 193.202.9.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mariedjones.com"] [uri "/.env"] [unique_id "Z848cqbkc9nWGKXAplA_NAAAABA"], referer: https://tasamm.com/about/mmm139.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-27 03:35:05
UTC ·
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇵🇱
sefinek.net
2024-08-30 14:04:11
UTC ·
(2 years ago)
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHT ...
show more
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (iPhone; CPU iPhone OS 17_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/124.0.6367.60 Mobile/15E148 Safari/604.1 - en-US - -
show less
Bad Web Bot
