🇺🇸
TPI-Abuse
2026-11-12 08:14:17
UTC ·
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 212.87.219.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:14:11.196710 2026] [security2:error] [pid 27171:tid 27171] [client 212.87.219.201:45145] ...
show more
(mod_security) mod_security (id:225170) triggered by 212.87.219.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:14:11.196710 2026] [security2:error] [pid 27171:tid 27171] [client 212.87.219.201:45145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||evolute.io|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "evolute.io"] [uri "/wp-json/wp/v2/users"] [unique_id "avV1U2oB7iQ4xhbOn63x1gAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
bps-statistics
2026-11-11 18:14:29
UTC ·
(17 hours ago)
Web Application Attacks
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 15:11:50
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:11:45.938010 2026] [security2:error] [pid 25168:tid 25168] [client 212.87.219.201:15295] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:11:45.938010 2026] [security2:error] [pid 25168:tid 25168] [client 212.87.219.201:15295] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/house-of-representatives/page/2/"] [unique_id "au3uMYNgaHmjX_plnNQZqwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
pusathosting.com
2026-11-04 04:48:03
UTC ·
(1 week ago)
24ds22 bruteforce
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-11-02 01:22:56
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2026-10-31 07:33:00
UTC ·
(1 week ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-23 02:43:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 212.87.219.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 22:43:19.974765 2026] [security2:error] [pid 25871:tid 25884] [client 212.87.219.201:42449] ...
show more
(mod_security) mod_security (id:210350) triggered by 212.87.219.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 22:43:19.974765 2026] [security2:error] [pid 25871:tid 25884] [client 212.87.219.201:42449] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aapm.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aapm.info"] [uri "/MPM-Master-Projec-Manager-Certificaiton-Guide.html"] [unique_id "atrJx2QVhcxl5M-e6hjV4AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-09-16 14:14:30
UTC ·
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇩🇪
pscriptos
2026-09-01 13:30:28
UTC ·
(2 months ago)
{"ClientAddr":"212.87.219.201:39873","ClientHost":"212.87.219.201","ClientPort":"39873","ClientUsername":"-","DownstreamContentSize":17363,"DownstreamStatus":403,"Duration":191708150,"OriginContentSize":17363,"OriginDuration":188613457,"OriginStatus" ...
show more
{"ClientAddr":"212.87.219.201:39873","ClientHost":"212.87.219.201","ClientPort":"39873","ClientUsername":"-","DownstreamContentSize":17363,"DownstreamStatus":403,"Duration":191708150,"OriginContentSize":17363,"OriginDuration":188613457,"OriginStatus":403,"Overhead":3094693,"RequestAddr":"www.cleveradmin.de","RequestContentSize":126,"RequestCount":5789205,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/wp-login.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-09-01T15:30:19.093332647+02:00","StartUTC":"2026-09-01T13:30:19.093332647Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-09-01T15:30:19+02:00"}
{"ClientAddr":"212.87.219.201:61673","ClientHost":"212.87.219.201","Clien
...
show less
Brute-Force
Web App Attack
🇬🇧
Steve
2026-07-02 06:03:31
UTC ·
(4 months ago)
Attempts against non-existent wordpress site
Brute-Force
Web App Attack
🇧🇪
Saec
2026-06-26 02:30:05
UTC ·
(4 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (1× on saec.me)
Port Scan
Web App Attack
🇩🇪
MusicLibrary
2026-06-25 00:34:07
UTC ·
(4 months ago)
Attempted access to non existent wordpress urls
Bad Web Bot
