๐ฎ๐น
IRT@Unisi
2026-08-01 10:50:06
(1 month ago)
Multiple web server 400 error codes from same source ip.
Bad Web Bot
๐ซ๐ท
Max la Menace
2025-04-17 04:47:01
(1 year ago)
Wordpress attack (F)
Blog Spam
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-01-29 01:02:03
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 28 20:01:54.842761 2025] [security2:error] [pid 4550:tid 4550] [client 196.247.160.73:58491] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||delcano.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "delcano.org"] [uri "/localizacion/trackback/"] [unique_id "Z5l-AjE7ei7mkWjEwKnjmQAAAAY"], referer: http://delcano.org/localizacion/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-01-28 21:19:10
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 28 16:19:03.495057 2025] [security2:error] [pid 3864769:tid 3864769] [client 196.247.160.73:41965] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||gormish.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "gormish.org"] [uri "/denise/trackback/"] [unique_id "Z5lJx--bJoxsIzuZuXqOuAAAAA8"], referer: http://gormish.org/denise/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-01-27 17:12:01
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 12:11:56.018988 2025] [security2:error] [pid 4903:tid 4903] [client 196.247.160.73:34594] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||mbehel.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "mbehel.com"] [uri "/"] [unique_id "Z5e-XCr0jk0ltgPw0E_5vwAAAA4"], referer: http://mbehel.com?/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
tecnicorioja
2025-01-25 23:00:40
(1 year ago)
(Mod_security) [25/Jan/2025:11:33:15.603227
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-14 13:20:31
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 14 08:20:26.500975 2024] [security2:error] [pid 7356:tid 7356] [client 196.247.160.73:45298] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||aimer.es|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "aimer.es"] [uri "/wp-trackback.php"] [unique_id "Z12GGl3QZ8nq9LYqis5PwAAAAAo"], referer: http://aimer.es/wp-trackback.php?p=1104
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-08 21:13:23
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 08 16:13:13.374283 2024] [security2:error] [pid 31408:tid 31408] [client 196.247.160.73:49149] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||ashwoodsecurity.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "ashwoodsecurity.com"] [uri "/trackback/"] [unique_id "Z1YL6colOaqM7gHXzAJzDQAAAAU"], referer: http://ashwoodsecurity.com/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-12-08 01:43:16
(1 year ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-07 09:11:23
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 04:11:18.963363 2024] [security2:error] [pid 19150:tid 19150] [client 196.247.160.73:47326] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.songwriterdemo.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.songwriterdemo.com"] [uri "/wp-comments-post.php"] [unique_id "Z1QRNubhkZuczjrMzolQ7wAAAAQ"], referer: http://www.songwriterdemo.com/home/home/songwriter-demos/home/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-06 19:02:47
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 14:02:38.389952 2024] [security2:error] [pid 30954:tid 30954] [client 196.247.160.73:59831] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||carolinafootprints.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "carolinafootprints.com"] [uri "/rough-green/comment-page-1/trackback/"] [unique_id "Z1NKTsEKL5KMaQ_mrNCo9AAAABE"], referer: http://carolinafootprints.com/rough-green/comment-page-1/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-11-20 00:04:08
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 19 19:04:04.901084 2024] [security2:error] [pid 14595:tid 14610] [client 196.247.160.73:36472] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.pyxelstudios.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pyxelstudios.com"] [uri "/trackback/"] [unique_id "Zz0ndLRCplgmR9-zE8LLwgAAAAw"], referer: http://www.pyxelstudios.com/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-11-13 00:53:50
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 19:53:45.446101 2024] [security2:error] [pid 13170:tid 13170] [client 196.247.160.73:57248] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||vabq.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "vabq.com"] [uri "/ShearsDesign/contact.html/trackback/"] [unique_id "ZzP4mWWPVhOCBujnLgzgPAAAAAc"], referer: http://vabq.com/ShearsDesign/contact.html/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-11-12 20:51:29
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 12 15:51:22.211056 2024] [security2:error] [pid 31309:tid 31309] [client 196.247.160.73:57947] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||lct.lbee.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "lct.lbee.com"] [uri "/Contact_Us/trackback/"] [unique_id "ZzO_yqrzwHCpkDCj9FNAvgAAAA0"], referer: http://lct.lbee.com/Contact_Us/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-11-11 15:52:55
(1 year ago)
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 196.247.160.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 11 10:52:48.266085 2024] [security2:error] [pid 24274:tid 24274] [client 196.247.160.73:49661] [client 196.247.160.73] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||andrejblatnik.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "andrejblatnik.com"] [uri "/sendmsg.php/trackback/"] [unique_id "ZzIoUKUpMcNk0h6-cKmtCAAAABQ"], referer: http://andrejblatnik.com/sendmsg.php/trackback/
show less
Brute-Force
Bad Web Bot
Web App Attack