🇫🇷
service Informatique
2026-09-15 04:00:37
(2 days ago)
GET /actuator
Web App Attack
🇮🇹
Rosh
2025-07-31 02:01:26
(1 year ago)
[07/31/25 04:01:26] 1 attack: /wp-login.php (severity 10);
Web App Attack
🇵🇹
compulab.pt
2025-07-28 18:27:06
(1 year ago)
WHMCS reset password brute force
Brute-Force
Web App Attack
2025-07-25 06:09:29
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
🇬🇧
Steve
2025-04-23 10:19:41
(1 year ago)
Excessive crawling - not obeying robots.txt
Bad Web Bot
🇹🇷
rtbh.com.tr
2025-04-21 20:06:13
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-04-21 00:06:12
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2025-04-20 20:06:13
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
ghostwarriors
2025-04-19 19:50:03
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2025-04-19 19:29:52
(1 year ago)
2025/04/19 21:29:51 [error] 14105#100893: *2635349 access forbidden by rule, client: 31.204.3.28, se ...
show more
2025/04/19 21:29:51 [error] 14105#100893: *2635349 access forbidden by rule, client: 31.204.3.28, server: git.ksol.io, request: "GET / HTTP/1.1", host: "git.ksol.io"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2025-04-19 14:25:57
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 10:25:49.580711 2025] [security2:error] [pid 5910:tid 6023] [client 31.204.3.28:28093] [client 31.204.3.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||boracayclassified.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "boracayclassified.com"] [uri "/index.php"] [unique_id "aAOybeywnE_mcJfdY1EFGgAAAAo"], referer: http://boracayclassified.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-25 14:14:21
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 10:14:15.043792 2025] [security2:error] [pid 301350:tid 301350] [client 31.204.3.28:34037] [client 31.204.3.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||walmartplace.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "walmartplace.com"] [uri "/index.php"] [unique_id "Z-K6NyRd5y_wI31JWdGs0AAAAAM"], referer: http://blog.zhutu.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-25 01:48:01
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 21:47:56.296059 2025] [security2:error] [pid 31214:tid 31214] [client 31.204.3.28:28455] [client 31.204.3.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nancyscafeandcatering.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/nav.php"] [unique_id "Z-ILTNjyAKiDNuwlhmZYoQAAABA"], referer: https://xn--80aafla5ae4aj.xn--b1adqkjc0a.xn--p1ai/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-15 17:09:48
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 31.204.3.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 15 13:09:41.474035 2025] [security2:error] [pid 21464:tid 21466] [client 31.204.3.28:52893] [client 31.204.3.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.psds.link.omegaoak.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.psds.link.omegaoak.com"] [uri "/"] [unique_id "Z9W0VSq0VNZfyk0LKGaGQAAAAEE"], referer: http://www.psds.link.omegaoak.com/
show less
Brute-Force
Bad Web Bot
Web App Attack