2025-11-19 00:55:46
(6 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2025-11-18 07:18:40
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 02:18:32.684859 2025] [security2:error] [pid 31753:tid 31755] [client 193.233.210.223:11829] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||transitionalcareservices.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "transitionalcareservices.com"] [uri "/"] [unique_id "aRwdyENZ0iyW59_pHJNemwAAAIA"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-10 21:14:05
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 17:14:01.623036 2025] [security2:error] [pid 6026:tid 6026] [client 193.233.210.223:19271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||shepherdsstaff.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "shepherdsstaff.net"] [uri "/"] [unique_id "aOl3GabR-P5C74yYfFoccAAAABU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2025-07-10 22:55:20
(11 months ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-07-01 23:26:58
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 01 19:26:50.715369 2025] [security2:error] [pid 29474:tid 29474] [client 193.233.210.223:21529] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||josephshv.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "josephshv.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGRuup87pVpbwJmc0uVtdgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-28 22:19:28
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 28 18:19:23.650993 2025] [security2:error] [pid 3346789:tid 3346789] [client 193.233.210.223:63389] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||akistech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "akistech.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aGBqawFD1clY0p7gNk6hpAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-12-03 06:34:29
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 03 01:34:25.431820 2024] [security2:error] [pid 6800:tid 6800] [client 193.233.210.223:21785] [client 193.233.210.223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ardath.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ardath.net"] [uri "/wp-json/wp/v2/users"] [unique_id "Z06mcSnGreMvZPtAMzbX2AAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-10-08 18:55:09
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
🇫🇷
Kenshin869
2024-10-05 20:43:21
(1 year ago)
Wordpress unauthorized access attempt
Brute-Force
🇨🇦
wil.com
2024-09-25 00:21:07
(1 year ago)
GlobalProtect login attempts with user sbaxter.
VPN IP
Brute-Force
🇺🇸
TPI-Abuse
2024-09-11 20:06:05
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.210.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 11 16:06:01.548244 2024] [security2:error] [pid 1282915:tid 1282940] [client 193.233.210.223:23533] [client 193.233.210.223] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thetooheys.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thetooheys.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZuH4KUo2L72QElzx3FiVZgAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
VSM Networks
2022-08-08 08:26:21
(3 years ago)
Credential Stuffing
Brute-Force