🇬🇧
SilverZippo
2026-09-04 02:33:45
(3 weeks ago)
Web App Attack
Web App Attack
🇧🇪
homies
2026-08-25 05:46:42
(1 month ago)
Web form spam.
Web Spam
🇺🇸
TPI-Abuse
2026-08-06 22:53:12
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 18:53:08.729051 2026] [security2:error] [pid 1739439:tid 1739439] [client 195.63.20.226:49600] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.directcch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.directcch.com"] [uri "/wp-login.php"] [unique_id "anUQVP09KYlF3-ZVemU3rQAAAB4"], referer: https://directcch.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-07-27 15:28:20
(2 months ago)
http-open-proxy - IP: 195.63.20.226 - time="2026-07-27T17:28:20+02:00" level=info msg="(555f66b4f6a ...
show more
http-open-proxy - IP: 195.63.20.226 - time="2026-07-27T17:28:20+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-open-proxy by ip 195.63.20.226 (DE/0) : 4h ban on Ip 195.63.20.226" module=db
show less
Web App Attack
🇺🇸
kosada.com
2026-07-25 19:41:12
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇨🇭
Origon
2026-07-21 11:00:30
(2 months ago)
http-open-proxy - IP: 195.63.20.226 - time="2026-07-21T13:00:30+02:00" level=info msg="(555f66b4f6a ...
show more
http-open-proxy - IP: 195.63.20.226 - time="2026-07-21T13:00:30+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-open-proxy by ip 195.63.20.226 (DE/0) : 4h ban on Ip 195.63.20.226" module=db
show less
Web App Attack
🇮🇹
[email protected]
2026-05-11 19:47:30
(4 months ago)
[Mon May 11 21:47:29.942155 2026] [authz_core:error] [pid 4068238:tid 4068291] [remote 195.63.20.226 ...
show more
[Mon May 11 21:47:29.942155 2026] [authz_core:error] [pid 4068238:tid 4068291] [remote 195.63.20.226:24610] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/xmlrpc.php
show less
Brute-Force
Web App Attack
2026-04-26 06:13:03
(5 months ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-22 03:11:43
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 21 23:11:37.001500 2026] [security2:error] [pid 16240:tid 16240] [client 195.63.20.226:12414] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.humbliaslaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.humbliaslaw.com"] [uri "/wp-login.php"] [unique_id "aeg8aCo1u67Yc7xttThi0AAAAAo"], referer: http://humbliaslaw.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 03:46:41
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 23:46:34.173367 2026] [security2:error] [pid 9853:tid 9853] [client 195.63.20.226:60994] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.schlegelcreative.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.schlegelcreative.com"] [uri "/wp-login.php"] [unique_id "abTaGq-1BncAeriVmphscQAAAAM"], referer: https://schlegelcreative.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-12 14:33:38
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 10:33:32.098734 2026] [security2:error] [pid 27895:tid 27895] [client 195.63.20.226:15270] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hydrusdetergents.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hydrusdetergents.com"] [uri "/wp-login.php"] [unique_id "abLOvOM6tCrTsZEErXzrCwAAABo"], referer: https://hydrusdetergents.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 19:18:44
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 15:18:37.292581 2026] [security2:error] [pid 25216:tid 25216] [client 195.63.20.226:57020] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/wp-login.php"] [unique_id "abHADbr1vEFpLegLvm4lkQAAAAw"], referer: http://persnicketyinc.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-10 19:03:51
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.20.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 15:03:44.403855 2026] [security2:error] [pid 27567:tid 27567] [client 195.63.20.226:52088] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.livingminimal.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.livingminimal.com"] [uri "/wp-login.php"] [unique_id "abBrEKw40zX4C4jZZmIpDQAAABI"], referer: http://livingminimal.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
