🇩🇪
big-cloud.nl
2026-04-29 06:46:55
(1 month ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 06:07:43
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 02:07:40.139927 2026] [security2:error] [pid 13223:tid 13223] [client 43.133.60.72:46542] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||icl1.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "icl1.org"] [uri "/"] [unique_id "afGgLG5xISLdawLyYEUaQgAAAAI"], referer: http://www.selfpostvideo.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 04:40:43
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 00:40:36.252895 2026] [security2:error] [pid 32194:tid 32194] [client 43.133.60.72:33302] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hazelwerner.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hazelwerner.com"] [uri "/"] [unique_id "afGLxHm_Jt6vnIcfptXm_QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 04:10:09
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 00:10:05.406633 2026] [security2:error] [pid 7630:tid 7630] [client 43.133.60.72:47112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rcto.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rcto.us"] [uri "/"] [unique_id "afGEnYyJBUOw_UMhZBLzewAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-04-29 03:47:08
(1 month ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: / (Rule ID: 920210) - Multiple/Conflicting Connection Header Data Found
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 01:53:59
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 21:53:53.972673 2026] [security2:error] [pid 16287:tid 16287] [client 43.133.60.72:41216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||teaforfrances.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "teaforfrances.com"] [uri "/"] [unique_id "afFksfiF40gvgZcsoxBNPgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 13:09:36
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 09:09:29.009359 2026] [security2:error] [pid 29487:tid 29487] [client 43.133.60.72:59180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.4-linesmeditationart.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.4-linesmeditationart.com"] [uri "/"] [unique_id "afCxid0EuUwwTV0R77-8rQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-04-28 12:54:38
(1 month ago)
Multiple/Conflicting Connection Header Data Found. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(? ...
show more
Multiple/Conflicting Connection Header Data Found. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. (920210-197)
show less
Hacking
🇩🇪
sdos.es
2026-04-28 11:39:17
(1 month ago)
"Multiple/Conflicting Connection Header Data Found - keep-alive, close"
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 11:02:49
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 07:02:41.573164 2026] [security2:error] [pid 20777:tid 20777] [client 43.133.60.72:55198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.christaylorjazzpianist.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.christaylorjazzpianist.com"] [uri "/"] [unique_id "afCT0fxqH4zeZo5iNag1rgAAAAY"], referer: http://www.christaylorjazzpianist.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-28 06:59:55
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 02:59:51.740636 2026] [security2:error] [pid 930:tid 930] [client 43.133.60.72:33290] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mjkhan.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mjkhan.com"] [uri "/"] [unique_id "afBa50Um_URn1JZlK1wdFAAAAAk"], referer: http://mjkhan.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-25 04:51:15
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 00:51:09.428100 2026] [security2:error] [pid 430962:tid 430962] [client 43.133.60.72:57188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stpetersplayers.co.uk|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stpetersplayers.co.uk"] [uri "/"] [unique_id "aexIPagplksZYPnrH8gbNwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2026-04-25 03:50:08
(1 month ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: / (Rule ID: 920210) - Multiple/Conflicting Connection Header Data Found
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 09:46:54
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 43.133.60.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 05:46:49.868494 2026] [security2:error] [pid 858124:tid 858124] [client 43.133.60.72:36134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||totenclaus.es|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "totenclaus.es"] [uri "/"] [unique_id "aes8CWadQBFETzjqWzwL0QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-24 09:46:02
(1 month ago)
Malicious activity detected
Hacking
Web App Attack