๐บ๐ธ
TPI-Abuse
2026-05-21 03:20:27
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.25.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.25.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 23:20:24.015973 2026] [security2:error] [pid 22176:tid 22176] [client 194.99.25.79:62255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||corepest.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "corepest.com"] [uri "/"] [unique_id "ag55-PxMTJLKhg3FpkVubgAAAAs"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-17 04:10:10
(1 month ago)
XMLRPC BRUTEFORCE - HTTP (Request)
Hacking
Anonymous
2025-12-08 22:41:21
(6 months ago)
Forum/form spam
Web Spam
๐ฉ๐ช
hbrks
2025-10-29 00:29:00
(7 months ago)
1 attack(s) detected, such as these: {"event":"nginx_block","ip":"194.99.25.79","host":"marche-be.co ...
show more
1 attack(s) detected, such as these: {"event":"nginx_block","ip":"194.99.25.79","host":"marche-be.com","request":"GET /wp-login.php HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36","reason":"service:unknow","timestamp":"2025-10-29T00:29:00 00:00","logentry":"marche-be.com 194.99.25.79 - - [29/Oct/2025:00:29:00 0000] GET /wp-login.php HTTP/1.1 444 0 http://marche-be.com/wp-login.php Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36 - matched:service:unknow"} * Report Details *: https://p4u.xyz/DSUHNIKHWK7/1* IP Details *: https://p4u.xyz/DSUHNIKHWK7/2
show less
Web Spam
Hacking
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-10-23 08:28:52
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.25.79 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.25.79 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 04:28:45.798230 2025] [security2:error] [pid 16084:tid 16084] [client 194.99.25.79:38973] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cms2020.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cms2020.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPnnPVD1Jl5OT6_TmqAO-AAAAAM"], referer: https://cms2020.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2025-05-24 05:02:06
(1 year ago)
Bad Web Bot
๐ท๐บ
sms.ru
2024-09-22 16:35:05
(1 year ago)
SMS pumping attack from foreign country
DDoS Attack
Anonymous
2024-07-16 06:10:36
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐ฎ๐ณ
Parth Maniar
2022-01-13 11:31:54
(4 years ago)
This IP carried out Apache Log4j RCE attempt(s) (also known as CVE-2021-44228 or Log4Shell). For mor ...
show more
This IP carried out Apache Log4j RCE attempt(s) (also known as CVE-2021-44228 or Log4Shell). For more information, or to report interesting/incorrect findings, give me a shoutout on @parthmaniar on Twitter.
show less
Hacking
Web App Attack
๐ฏ๐ต
Nanoniele
2021-06-22 21:47:38
(4 years ago)
2021/06/22 16:28:53; SQL injection; SELECT, GROUP; 4580 0x71443156 2836 2836 0x6d4f6762 2 HAVING MIN ...
show more
2021/06/22 16:28:53; SQL injection; SELECT, GROUP; 4580 0x71443156 2836 2836 0x6d4f6762 2 HAVING MIN0 KFzV; Chrome/76.0.3809.111
show less
SQL Injection
๐จ๐ญ
backslash
2021-02-10 05:06:33
(5 years ago)
Brute-Force