🇫🇷
masterguru
2026-11-12 19:47:54
UTC ·
(22 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)
Hacking
🇺🇸
TPI-Abuse
2026-11-12 19:40:32
UTC ·
(22 hours ago)
(mod_security) mod_security (id:225170) triggered by 37.61.121.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:40:25.973282 2026] [security2:error] [pid 18692:tid 18692] [client 37.61.121.31:1364] ModS ...
show more
(mod_security) mod_security (id:225170) triggered by 37.61.121.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:40:25.973282 2026] [security2:error] [pid 18692:tid 18692] [client 37.61.121.31:1364] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goodfrequencies.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goodfrequencies.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avYWKStWqm1Xauo9fD0AaAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
gadix
2026-10-29 17:06:48
UTC ·
(2 weeks ago)
[29/Oct/2026:18:06:41.966270 +0100] auN9IbQTHqUHmhw1msK_pgAAAAc 37.61.121.31 36604 127.0.0.1 7081
[29/Oct/2026:18:06:46.284658 +0100] auN9JrQTHqUHmhw1msK_qQAAABU 37.61.121.31 36644 127.0.0.1 7081
[29/
...
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 15:59:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 37.61.121.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:59:04.347882 2026] [security2:error] [pid 24847:tid 24847] [client 37.61.121.31:12459] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 37.61.121.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:59:04.347882 2026] [security2:error] [pid 24847:tid 24847] [client 37.61.121.31:12459] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||appsdips.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "appsdips.com"] [uri "/"] [unique_id "auNtSLc5KqN4KmpR-0dPMQAAAAE"], referer: https://five.co.in/redirect.php?ref_host=behavioralhealthinscschools.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 03:49:57
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 37.61.121.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:49:52.126095 2026] [security2:error] [pid 24324:tid 24324] [client 37.61.121.31:1288] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 37.61.121.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:49:52.126095 2026] [security2:error] [pid 24324:tid 24324] [client 37.61.121.31:1288] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||asiabeef.network|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "asiabeef.network"] [uri "/delegation-photo-gallery.html"] [unique_id "auAfYExVUJzZ9RXkT4Ve4gAAAAc"], referer: https://asiabeef.network/cattle-and-beef-price-maps-for-lao-pdr.html
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-23 22:00:40
UTC ·
(2 weeks ago)
Network service scanning detected by FortiGate; source quarantined.
Port Scan
🇺🇸
kosada.com
2026-08-12 23:53:21
UTC ·
(3 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇫🇷
security.rdmc.fr
2026-08-11 07:20:40
UTC ·
(3 months ago)
Port Scan Attack proto:TCP src:12514 dst:23
Port Scan
2026-07-29 03:02:53
UTC ·
(3 months ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇺🇸
stechusa
2026-07-23 19:05:39
UTC ·
(3 months ago)
ELEVATED_THREAT | 366 IPs targeting /brand.html | URL template shared by 115 IPs: /brand.html?bulb_shape_type=*&bulb_shape=*&bulb_type=*&mode=list&p=* | Facet request during elevated threat (facet_ratio=0.95, unique_ips=543)
Bad Web Bot
DDoS Attack
2026-01-23 10:11:32
UTC ·
(9 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
2025-11-22 14:43:10
UTC ·
(11 months ago)
scanning http requests from known botnet
Web App Attack
🇩🇪
jjdb
2025-09-30 16:01:10
UTC ·
(1 year ago)
dmarc report
Spoofing
