🇨🇭
backslash
2025-11-11 17:30:11
(6 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2025-11-03 08:58:15
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 03:58:09.348828 2025] [security2:error] [pid 26318:tid 26318] [client 193.233.211.240:15171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jesuspuzzle.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jesuspuzzle.com"] [uri "/"] [unique_id "aQhuoVDW9Qdi7e8iugUM2QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-27 22:39:23
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 18:39:17.629891 2025] [security2:error] [pid 4464:tid 4464] [client 193.233.211.240:53475] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||staben.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aP_0lUytPg4cNXGDpAMFkQAAABQ"], referer: https://staben.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-24 17:08:12
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 24 13:08:06.353894 2025] [security2:error] [pid 2422:tid 2422] [client 193.233.211.240:9303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPuydtYuo_inn28cxZ1t0AAAABM"], referer: https://jolankagroup.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-12-18 13:07:23
(1 year ago)
Attempted brute force login to web vpn
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2024-06-18 16:11:43
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 193.233.211.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 18 12:11:36.816091 2024] [security2:error] [pid 15863:tid 47312959178496] [client 193.233.211.240:49107] [client 193.233.211.240] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.certifiedebusinessconsultant.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.certifiedebusinessconsultant.com"] [uri "/"] [unique_id "ZnGxuDlztpWsMOsmou1PxwAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Admins@FBN
2024-06-08 00:44:40
(2 years ago)
VPN Logon Failed: AAA user authentication Rejected user = <copier>
Brute-Force
Exploited Host
2024-03-13 00:10:26
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
www.narsol.org
2023-09-19 14:42:31
(2 years ago)
Sep 19 10:42:28 do1 wordpress(narsol.org)[2757426]: Authentication attempt for unknown user media fr ...
show more
Sep 19 10:42:28 do1 wordpress(narsol.org)[2757426]: Authentication attempt for unknown user media from 193.233.211.240
Sep 19 10:42:30 do1 wordpress(narsol.org)[2572265]: Authentication attempt for unknown user media from 193.233.211.240
...
show less
DDoS Attack
Web App Attack
🇺🇸
M Bradley
2023-04-08 05:58:00
(3 years ago)
Attempted hack on wordpress vulnerability: /wp-content/themes/child-theme-storefront
Web App Attack