🇺🇸
TPI-Abuse
2026-11-10 04:34:10
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:34:06.292629 2026] [security2:error] [pid 18587:tid 18587] [client 193.203.8.221:38315] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:34:06.292629 2026] [security2:error] [pid 18587:tid 18587] [client 193.203.8.221:38315] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||socialstudiesforkids.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/articles/ushistory/hernandodesoto.htm"] [unique_id "avKevm7LKgyMLck5rmiBgAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
abivia
2026-11-09 05:05:49
UTC ·
(2 days ago)
Abivia WAF trigger: Rule scriptKiddies: Probing for vulnerabilities uri: /oembed.php?url=https%3A%2F%2Fambitonline.com%2Fnextrelease%2F2007%2F05%2Fdeveloper-tip-catching-typos-in-php5%2F&format=xml
Hacking
🇺🇸
TPI-Abuse
2026-11-05 06:06:42
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:06:36.957277 2026] [security2:error] [pid 31773:tid 31773] [client 193.203.8.221:60979] M ...
show more
(mod_security) mod_security (id:210350) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:06:36.957277 2026] [security2:error] [pid 31773:tid 31773] [client 193.203.8.221:60979] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paleopathologist.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paleopathologist.com"] [uri "/diet/sweet-poison-what-is-it-about-glucose/"] [unique_id "auwc7GDfsGh8Y1hwBybkSwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hchristo
2026-09-16 20:23:09
UTC ·
(1 month ago)
[Wed Sep 16 22:23:04.825245 2026] [access_compat:error] [pid 25382:tid 25476] [client 193.203.8.221:37747] AH01797: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/subdomains/fangtagebuch.fortunecafe.de/xmlrpc.php
[Wed Se ...
show more
[Wed Sep 16 22:23:04.825245 2026] [access_compat:error] [pid 25382:tid 25476] [client 193.203.8.221:37747] AH01797: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/subdomains/fangtagebuch.fortunecafe.de/xmlrpc.php
[Wed Sep 16 22:23:05.660685 2026] [access_compat:error] [pid 25382:tid 25480] [client 193.203.8.221:64965] AH01797: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/subdomains/fangtagebuch.fortunecafe.de/xmlrpc.php
[Wed Sep 16 22:23:06.497410 2026] [access_compat:error] [pid 25382:tid 25462] [client 193.203.8.221:38925] AH01797: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/subdomains/fangtagebuch.fortunecafe.de/xmlrpc.php
[Wed Sep 16 22:23:07.334703 2026] [access_compat:error] [pid 25382:tid 25457] [client 193.203.8.221:27181] AH01797: client denied by server configuration: /var/www/kd1103/htdocs/fortunecafe.de/subdomains/fangtagebuch.fortunecafe.de/wp-admin/xmlrpc.php
[Wed Sep 16 22:23:0
...
show less
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-08 14:33:17
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
2026-03-31 19:44:22
UTC ·
(7 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇳🇿
Tripwire
2026-03-30 05:19:54
UTC ·
(7 months ago)
Probing for Wordpress - /wp-login.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 11:07:20
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 07:07:12.675464 2026] [security2:error] [pid 26056:tid 26056] [client 193.203.8.221:39843] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 07:07:12.675464 2026] [security2:error] [pid 26056:tid 26056] [client 193.203.8.221:39843] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||grieve.tv|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "grieve.tv"] [uri "/wp-json/wp/v2/users"] [unique_id "acPB4P0saeJRbGnFkMnfQQAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 23:53:00
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 19:52:55.264031 2026] [security2:error] [pid 16549:tid 16549] [client 193.203.8.221:56021] M ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.8.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 19:52:55.264031 2026] [security2:error] [pid 16549:tid 16549] [client 193.203.8.221:56021] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talamancareserve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talamancareserve.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acMj1wbN5-AOrXm4TcDiFAAAAC4"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-25 19:03:32
UTC ·
(11 months ago)
Forum/form spam
Web Spam
🇪🇸
10dencehispahard SL
2025-05-27 05:57:14
UTC ·
(1 year ago)
DDOS fasthttp
DDoS Attack
2025-05-21 01:35:20
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇮🇩
BPS-StatisticsIndonesia
2025-02-08 13:22:42
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-02-03 15:35:42
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
