🇺🇸
TPI-Abuse
2026-11-12 19:23:54
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 201.220.22.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:23:47.456770 2026] [security2:error] [pid 21108:tid 21108] [client 201.220.22.241:43252] ...
show more
(mod_security) mod_security (id:210350) triggered by 201.220.22.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:23:47.456770 2026] [security2:error] [pid 21108:tid 21108] [client 201.220.22.241:43252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||backspaced.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "backspaced.com"] [uri "/"] [unique_id "avYSQ_n_Zt_mWtBw_mBgjAAAABU"], referer: https://conliferes.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
ability6511
2026-11-11 10:57:45
UTC ·
(2 days ago)
Brute-force login attack detected by WordPress firewall. 5 failed login attempts within the configured time window.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 14:28:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 201.220.22.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:28:16.555305 2026] [security2:error] [pid 23032:tid 23032] [client 201.220.22.241:41520] ...
show more
(mod_security) mod_security (id:210350) triggered by 201.220.22.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:28:16.555305 2026] [security2:error] [pid 23032:tid 23032] [client 201.220.22.241:41520] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cmcnow.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cmcnow.com"] [uri "/"] [unique_id "auieABYOBPSX5D9VbYbKgQAAABk"], referer: https://addurl.in/redirect.php?ref_host=mini-voiture.fr
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RAP
2026-11-01 15:06:17
UTC ·
(1 week ago)
2026-11-01 15:06:17 UTC Unauthorized activity to TCP port 22. SSH
SSH
🇦🇺
Ticketebo Pty. Ltd.
2026-11-01 13:15:13
UTC ·
(1 week ago)
$f2bV_matches
Brute-Force
🇩🇪
FeG Deutschland
2026-10-30 12:37:25
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
LRob
2026-10-28 17:11:45
UTC ·
(2 weeks ago)
Proxynvader botnet: shop search flood (L7 DDoS) | path: /170-velo-route | query: resultsPerPage=12 | src_port: 58666 | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
DDoS Attack
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-27 09:01:56
UTC ·
(2 weeks ago)
Port Scan Attack proto:TCP src:57634 dst:23
Port Scan
🇸🇬
mypatricks
2026-10-26 09:55:50
UTC ·
(2 weeks ago)
201.220.22.241 | Port: 12035 | DNS: 201.220.22.241 2026-10-26T17:55:49+08:00 America/Argentina/Buenos_Aires | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 ...
show more
201.220.22.241 | Port: 12035 | DNS: 201.220.22.241 2026-10-26T17:55:49+08:00 America/Argentina/Buenos_Aires | IPs Spam list | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /?1754288877&aa9bde8b8fffedea=674 | Ref: - | Country: AR/Argentina/−03:00 IP City: La Plata Windows a50896672e46db70-EZE/Buenos Aires, Argentina 1 hits/0 secs Browser 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
🇺🇸
TPI-Abuse
2026-10-23 13:27:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 201.220.22.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:27:23.216932 2026] [security2:error] [pid 29410:tid 29410] [client 201.220.22.241:52724] ...
show more
(mod_security) mod_security (id:210350) triggered by 201.220.22.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:27:23.216932 2026] [security2:error] [pid 29410:tid 29410] [client 201.220.22.241:52724] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mathsquad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mathsquad.com"] [uri "/"] [unique_id "attguxZk5sl3AR5EWD7_fQAAAAI"], referer: https://phyllisfavorites.blogspot.com/2005_06_05_archive.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2026-10-11 01:23:23
UTC ·
(1 month ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
Packets-Decreaser.NET
2026-10-03 21:43:30
UTC ·
(1 month ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇺🇸
鬼影233
2026-10-01 11:36:48
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-10-01 07:56:34
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
2026-10-01 00:29:27
UTC ·
(1 month ago)
denied traffic to a honeypot network. destination port 22.
Port Scan
Hacking
