🇳🇴
jad-abuse
2026-11-14 22:47:21
UTC ·
(19 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:34:48
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 194.180.232.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:34:40.778013 2026] [security2:error] [pid 2145:tid 2145] [client 194.180.232.155:12001] ...
show more
(mod_security) mod_security (id:210350) triggered by 194.180.232.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:34:40.778013 2026] [security2:error] [pid 2145:tid 2145] [client 194.180.232.155:12001] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||participation.direct|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "participation.direct"] [uri "/participation-for-all/"] [unique_id "avX4sDu1IJ4FK4TPNW3y3QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 09:26:24
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.180.232.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 05:26:19.809979 2026] [security2:error] [pid 12932:tid 12932] [client 194.180.232.155:4301 ...
show more
(mod_security) mod_security (id:210350) triggered by 194.180.232.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 05:26:19.809979 2026] [security2:error] [pid 12932:tid 12932] [client 194.180.232.155:43017] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.capefearastro.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.capefearastro.org"] [uri "/asaw.htm"] [unique_id "auBuO6BEtjnCP0Ob-crJPwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 00:23:22
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.180.232.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:23:17.966247 2026] [security2:error] [pid 24848:tid 24848] [client 194.180.232.155:2510 ...
show more
(mod_security) mod_security (id:210350) triggered by 194.180.232.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 20:23:17.966247 2026] [security2:error] [pid 24848:tid 24848] [client 194.180.232.155:25105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||deborahbein.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "deborahbein.com"] [uri "/2012/"] [unique_id "atgF9aMjuXzApr8gx14M5QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇷
zold404
2026-10-19 12:00:00
UTC ·
(3 weeks ago)
WordPress admin takeover with stolen credentials, webshell use or malicious plugin upload (Oct-Nov 2026)
Web App Attack
Brute-Force
Hacking
2026-10-06 23:47:30
UTC ·
(1 month ago)
IM360 WAF: Attempt to upload malware
Hacking
🇳🇱
i-turnradio.nl
2025-10-17 17:40:03
UTC ·
(1 year ago)
2025-10-17 @ 19:40:03 (CET) ~ Blocked for trying to access: /xmlrpc.php
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-10-16 18:46:00
UTC ·
(1 year ago)
WP Admin Scan Activities
Web App Attack
2025-10-16 17:29:30
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
2025-10-10 20:29:01
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
2025-10-10 05:02:49
UTC ·
(1 year ago)
wordpress-trap
Web App Attack
🇨🇭
backslash
2025-06-25 05:45:05
UTC ·
(1 year ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
inspectorgdgt
2025-06-17 19:07:40
UTC ·
(1 year ago)
Observed suspicious activity from IP address
Brute-Force
SSH
