🇩🇪
big-cloud.nl
2026-06-12 09:23:30
(5 days ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-10 12:02:21
(1 week ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 01:55:34
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 21:55:29.692166 2026] [security2:error] [pid 27492:tid 27492] [client 43.134.167.251:35228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aliciagrant.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aliciagrant.com"] [uri "/"] [unique_id "aijEEYNuk1oHP2JilYyceAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 22:56:04
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 18:55:56.493758 2026] [security2:error] [pid 3867:tid 3867] [client 43.134.167.251:39658] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||accordionfactory.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "accordionfactory.com"] [uri "/"] [unique_id "aiiZ_HnRa6t1E8KJ83caQgAAAGQ"], referer: http://www.accordioninfo.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 21:35:40
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:35:35.973900 2026] [security2:error] [pid 22980:tid 22980] [client 43.134.167.251:33196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||192.64.150.92:80|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "192.64.150.92"] [uri "/"] [unique_id "aiiHJ9eEfMdshmmOqGGMdgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
f3sc
2026-06-09 21:34:12
(1 week ago)
43.134.167.251 - - [09/Jun/2026:23:34:12 +0200] "GET / HTTP/1.0" 400 943 "-" "-"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:33:21
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:33:17.673057 2026] [security2:error] [pid 7656:tid 7656] [client 43.134.167.251:57736] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thenewplantation.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thenewplantation.org"] [uri "/"] [unique_id "aih4jRF89IrqKcYKkY3CvwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 19:45:23
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 15:45:17.058305 2026] [security2:error] [pid 4585:tid 4585] [client 43.134.167.251:49376] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ageiron.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ageiron.org"] [uri "/"] [unique_id "aihtTZMltMo2jk4BFlWZWgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 19:00:57
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 15:00:50.869269 2026] [security2:error] [pid 6861:tid 6861] [client 43.134.167.251:42816] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ileronde.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ileronde.com"] [uri "/"] [unique_id "aihi4h3It8XrPr2HLYaw9gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 18:41:19
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:41:15.403341 2026] [security2:error] [pid 20378:tid 20378] [client 43.134.167.251:40096] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.champschallenge.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.champschallenge.org"] [uri "/"] [unique_id "aiheS583wJuKJTfZwbzA5AAAABk"], referer: http://www.champschallenge.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 17:54:15
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:54:08.442788 2026] [security2:error] [pid 29121:tid 29121] [client 43.134.167.251:57466] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cityslickerstomp.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cityslickerstomp.info"] [uri "/"] [unique_id "aihTQJdCa7ulljjqwyCV_wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
soverin
2026-06-09 17:49:31
(1 week ago)
Network scan on port 80
Email Spam
🇺🇸
TPI-Abuse
2026-06-09 17:00:57
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:00:53.190885 2026] [security2:error] [pid 25968:tid 25968] [client 43.134.167.251:39678] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||campbellfrost.art|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "campbellfrost.art"] [uri "/"] [unique_id "aihGxcKA0K_PI32ks5mU0AAAABk"], referer: http://campbellfrost.art
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 16:30:35
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:30:32.870647 2026] [security2:error] [pid 27930:tid 27957] [client 43.134.167.251:34334] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.seips.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.seips.org"] [uri "/"] [unique_id "aig_qI6Fx5ZYr650miSxzQAAABc"], referer: http://www.seips.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 16:06:46
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 43.134.167.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:06:38.617822 2026] [security2:error] [pid 12563:tid 12563] [client 43.134.167.251:38294] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ichoosethelight.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ichoosethelight.org"] [uri "/"] [unique_id "aig6DpiIOXv-lr4KBfweHwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack