🇺🇸
TPI-Abuse
2026-11-15 12:16:54
UTC ·
(9 minutes ago)
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:16:49.453483 2026] [security2:error] [pid 2112:tid 2112] [client 194.26.129.27:61673] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 07:16:49.453483 2026] [security2:error] [pid 2112:tid 2112] [client 194.26.129.27:61673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/todays-academy/professorial-and-collegiate-universities/"] [unique_id "avmisUzfkrRDFgbPY6ZPDAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 05:22:49
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:22:44.430347 2026] [security2:error] [pid 27847:tid 27847] [client 194.26.129.27:20545] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:22:44.430347 2026] [security2:error] [pid 27847:tid 27847] [client 194.26.129.27:20545] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/1259"] [unique_id "avlBpLEQWOSIIHJHwYjr2gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 01:57:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:57:53.296203 2026] [security2:error] [pid 31639:tid 31639] [client 194.26.129.27:62229] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:57:53.296203 2026] [security2:error] [pid 31639:tid 31639] [client 194.26.129.27:62229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/department-of-education/"] [unique_id "au_XIWbcuE6co8-v1uh6ggAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 00:31:15
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇩🇪
big-cloud.nl
2026-11-05 19:04:12
UTC ·
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 06:10:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:09:57.023172 2026] [security2:error] [pid 15605:tid 15605] [client 194.26.129.27:40561] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:09:57.023172 2026] [security2:error] [pid 15605:tid 15605] [client 194.26.129.27:40561] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||christianebooks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "christianebooks.com"] [uri "/A_Funny_Thing_Happened_on_the_way_to_the_temple_graham.htm"] [unique_id "auwdtVe_jZ_joQjgXfqO7wAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:17:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:17:19.811408 2026] [security2:error] [pid 9939:tid 9939] [client 194.26.129.27:33677] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:17:19.811408 2026] [security2:error] [pid 9939:tid 9939] [client 194.26.129.27:33677] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.amywoodruff.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.amywoodruff.com"] [uri "/blog/artist/performances/moon-cove-throwback-tale/"] [unique_id "aulELyNmMaTKVd6fAZA9QAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:10:48
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:10:42.608149 2026] [security2:error] [pid 21435:tid 21435] [client 194.26.129.27:63935] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:10:42.608149 2026] [security2:error] [pid 21435:tid 21435] [client 194.26.129.27:63935] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dmasoftlab.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dmasoftlab.com"] [uri "/"] [unique_id "auWiggtL93LUg6VQ0oLnGwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
georgengelmann
2026-10-26 21:14:56
UTC ·
(2 weeks ago)
Failed login attempt for admin
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-09-29 00:30:31
UTC ·
(1 month ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
🇺🇸
nowyouknow
2025-07-18 18:25:25
UTC ·
(1 year ago)
(From [email protected] ) We have hacked your website https://londosfamilychiropractic.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. Aft ...
show more
(From [email protected] ) We have hacked your website https://londosfamilychiropractic.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server.
What does this mean?
We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://londosfamilychiropractic.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat
show less
Phishing
Web Spam
🇺🇸
nowyouknow
2025-07-18 13:57:38
UTC ·
(1 year ago)
(From [email protected] ) We have hacked your website https://awakeningchironorth.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding ...
show more
(From [email protected] ) We have hacked your website https://awakeningchironorth.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server.
What does this mean?
We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://awakeningchironorth.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off of blackhat techniques tha
show less
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-03-11 22:10:40
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 11 18:10:35.527990 2025] [security2:error] [pid 18182:tid 18182] [client 194.26.129.27:42565] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 11 18:10:35.527990 2025] [security2:error] [pid 18182:tid 18182] [client 194.26.129.27:42565] [client 194.26.129.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "politicallycorrecteconomics.com"] [uri "/.env"] [unique_id "Z9C02w3vYNart9jCiuv9RAAAACY"], referer: https://tasamm.com/about/ppp42.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-09 14:59:12
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 10:59:05.795842 2025] [security2:error] [pid 23762:tid 23762] [client 194.26.129.27:18945] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 194.26.129.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 10:59:05.795842 2025] [security2:error] [pid 23762:tid 23762] [client 194.26.129.27:18945] [client 194.26.129.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manteconphoto.com"] [uri "/.env"] [unique_id "Z82suRRoc9RQlxvCKYRPGAAAACM"], referer: https://tasamm.com/about/mmm136.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
rafix
2023-11-01 01:25:37
UTC ·
(3 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
