2026-11-08 06:38:09
UTC ·
(21 hours ago)
Web application attack detected.
Web App Attack
🇺🇸
lostswordfish.com
2026-11-05 07:54:05
UTC ·
(3 days ago)
Wordfence waf block on registrymatters
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 06:42:37
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 202.83.126.245 (client.sambd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:42:32.117068 2026] [security2:error] [pid 24180:tid 24180] [client 202.83 ...
show more
(mod_security) mod_security (id:210350) triggered by 202.83.126.245 (client.sambd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 01:42:32.117068 2026] [security2:error] [pid 24180:tid 24180] [client 202.83.126.245:43876] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mathsquad.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mathsquad.com"] [uri "/"] [unique_id "aubfWBN1wnpYZmRwWdZrbgAAAAE"], referer: https://biblemathprojects.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
karger
2026-10-27 14:31:21
UTC ·
(1 week ago)
Wordpress attack - soft filter
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-10-23 12:57:03
UTC ·
(2 weeks ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
kosada.com
2026-10-19 18:11:46
UTC ·
(2 weeks ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=33&topics%5B3%5D=52&topics%5B4%5D=37&topics%5B5%5D=38 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/5 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=33&topics%5B3%5D=52&topics%5B4%5D=37&topics%5B5%5D=38 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-05 21:45:51
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 202.83.126.245 (client.sambd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 17:45:43.423835 2026] [security2:error] [pid 27956:tid 27956] [client 202.83 ...
show more
(mod_security) mod_security (id:210350) triggered by 202.83.126.245 (client.sambd.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 17:45:43.423835 2026] [security2:error] [pid 27956:tid 27956] [client 202.83.126.245:44138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.staben.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.staben.com"] [uri "/"] [unique_id "asQah3-6voLMtvBUrl2-bgAAABM"], referer: https://urlbacklink.shop/dir/backlinks-for-traffic-197050
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-10-02 09:59:42
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=45&topics%5B1%5D=79&topics%5B2%5D=25&topics%5B3%5D=29 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=45&topics%5B1%5D=79&topics%5B2%5D=25&topics%5B3%5D=29 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47")
show less
DDoS Attack
Bad Web Bot
🇮🇹
A000Z
2026-09-23 00:45:04
UTC ·
(1 month ago)
Fail2Ban: 202.83.126.245 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-08-31 16:00:48
UTC ·
(2 months ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
kosada.com
2026-08-26 14:39:41
UTC ·
(2 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
LRob
2026-08-05 03:01:31
UTC ·
(3 months ago)
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763852400/cat_ids~139,157/tag_ids~632,222,553,339,792/request_format~json/ | UA: Mozilla ...
show more
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763852400/cat_ids~139,157/tag_ids~632,222,553,339,792/request_format~json/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
show less
DDoS Attack
Web App Attack
🇩🇪
LRob
2026-08-04 07:24:38
UTC ·
(3 months ago)
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763161200/cat_ids~190,192/tag_ids~822,442,439,553,455,582/request_format~json/ | UA: Moz ...
show more
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763161200/cat_ids~190,192/tag_ids~822,442,439,553,455,582/request_format~json/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
show less
DDoS Attack
Web App Attack
🇺🇸
kosada.com
2026-08-01 13:17:54
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-06 05:48:09
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
