|
🇩🇪
iGroupware
|
|
{"req/ip"=>{:discriminator=>"217.181.85.152", :count=>1, :period=>180, :limit=>500, :epoch_time=>178 ...
show more
{"req/ip"=>{:discriminator=>"217.181.85.152", :count=>1, :period=>180, :limit=>500, :epoch_time=>1786515494}, "signups/ip"=>{:discriminator=>"217.181.85.152", :count=>1, :period=>3600, :limit=>5, :epoch_time=>1786515494}, "signups/email"=>{:discriminator=>"[email protected]", :count=>3, :period=>86400, :limit=>2, :epoch_time=>1786515494}}
show less
|
Web App Attack
|
|
|
Anonymous
|
|
LP_FAIL on WP_LOGIN, BF_DETECTED
|
Hacking
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 217.181.85.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 217.181.85.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 23:15:01.747759 2026] [security2:error] [pid 19278:tid 19278] [client 217.181.85.152:30598] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||humbliaslaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "humbliaslaw.com"] [uri "/wp-login.php"] [unique_id "agvVtUV4cuzo8_Y4VwC_SwAAABo"], referer: http://humbliaslaw.com/wp-login.php
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇫🇮
JimArchon72
|
|
2026/05/07 08:37:10 "GET /wp-login.php HTTP/1.1"
|
Web App Attack
|
|
|
🇺🇸
nationaleventpros.com
|
|
WordPress login attempt
|
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 217.181.85.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 217.181.85.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 09:26:20.693715 2026] [security2:error] [pid 17623:tid 17648] [client 217.181.85.152:16520] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kettlehill.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kettlehill.com"] [uri "/wp-login.php"] [unique_id "aamSjHY5QruPaBWTCAyYNgAAAJc"], referer: https://kettlehill.com/wp-login.php
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 217.181.85.152 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 217.181.85.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 02:23:34.566726 2026] [security2:error] [pid 1420:tid 1420] [client 217.181.85.152:59890] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fiasdesigns.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fiasdesigns.com"] [uri "/wp-login.php"] [unique_id "aafd9o-UhS1pIKzjFCIrlAAAACY"], referer: http://fiasdesigns.com/wp-login.php
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|