🇷🇸
Smel
2026-10-03 16:32:22
(2 hours ago)
SSH/22 MH Probe, BF, Hack -
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-10-03 14:36:50
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 10:36:42.366596 2026] [security2:error] [pid 15381:tid 15381] [client 202.94.164.214:56046] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||swampoodlegrounds.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "swampoodlegrounds.com"] [uri "/"] [unique_id "asES-sv6HBI7mH0e8l6eLQAAAAs"], referer: https://backlinktracker.store/dir/natural-link-building-services-201791
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-10-03 02:56:17
(15 hours ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇫🇷
bigorre.org
2026-10-02 15:16:59
(1 day ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 19:53:23
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 15:53:16.607345 2026] [security2:error] [pid 28350:tid 28350] [client 202.94.164.214:53908] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||virtuallyinfinitesystems.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "virtuallyinfinitesystems.com"] [uri "/"] [unique_id "ar66LHMfUFt-n9_ZIOqktgAAABA"], referer: https://makefreebacklinks.site/dir/competitive-seo-backlinks-226679
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
matt
2026-03-04 00:19:52
(6 months ago)
DDOS attack with query parameters attempting to overload WordPress site.
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-15 04:50:21
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:50:05.945290 2026] [security2:error] [pid 12724:tid 12724] [client 202.94.164.214:39476] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pages4you.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pages4you.com"] [uri "/pages4you.com/dj/graphics/DJ_EVENT/WS_FTP.LOG"] [unique_id "aZFQfVF7u8yfDvFjr3gkFgAAAAk"], referer: http://pages4you.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 07:47:29
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 202.94.164.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:47:19.293055 2026] [security2:error] [pid 23229:tid 23300] [client 202.94.164.214:57506] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.marinkovich.name|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.marinkovich.name"] [uri "/wwjnd.com"] [unique_id "aY7XBxLdtPHrxckGmU3A3gAAAYs"], referer: http://www.marinkovich.name/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-02-12 16:11:44
(7 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -57.296 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -57.296 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3
show less
Bad Web Bot
Web App Attack
🇺🇸
Hmorrin
2026-02-11 11:16:00
(7 months ago)
Port Scan
🇫🇷
Sklurk
2026-02-11 09:11:48
(7 months ago)
Web App Attack
Web App Attack
🇺🇸
Hmorrin
2026-02-10 04:16:12
(7 months ago)
Port Scan
🇦🇺
MAGIC
2026-02-10 00:13:36
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-02-09 17:19:49
(7 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇫🇷
Sklurk
2026-02-09 06:11:55
(7 months ago)
Web App Attack
Web App Attack
