🇩🇪
big-cloud.nl
2026-06-10 10:53:47
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
2026-06-10 03:16:02
(1 week ago)
Malicious activity detected
Hacking
Web App Attack
🇳🇱
myip.foo
2026-06-10 00:26:39
(1 week ago)
[myip.foo] 43.156.71.125 - - [10/Jun/2026:00:26:38 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 ...
show more
[myip.foo] 43.156.71.125 - - [10/Jun/2026:00:26:38 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 00:03:54
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:03:49.177398 2026] [security2:error] [pid 5579:tid 5579] [client 43.156.71.125:45790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||firebelly.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "firebelly.org"] [uri "/"] [unique_id "aiip5Xbp2cvjQAEGPv2s9wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
blinx
2026-06-09 23:51:09
(1 week ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 22:53:06
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 18:53:02.169696 2026] [security2:error] [pid 19696:tid 19696] [client 43.156.71.125:59958] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nothotmail.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nothotmail.org"] [uri "/"] [unique_id "aiiZTlMlu5N3AuIfRPy4fgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 21:58:49
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:58:40.901692 2026] [security2:error] [pid 4539:tid 4539] [client 43.156.71.125:46324] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dcmillerjr.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dcmillerjr.com"] [uri "/"] [unique_id "aiiMkK7QOfr1mmSU_F6JNQAAAAo"], referer: http://www.dcmillerjr.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 21:36:26
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:36:20.174746 2026] [security2:error] [pid 23390:tid 23390] [client 43.156.71.125:34928] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mundanestudies.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mundanestudies.org"] [uri "/"] [unique_id "aiiHVJ587LA_c3XRYCD2pQAAAAA"], referer: http://www.mundanestudies.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 20:49:02
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 16:48:57.162343 2026] [security2:error] [pid 14399:tid 14399] [client 43.156.71.125:43004] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.healthpointphysicians.co|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.healthpointphysicians.co"] [uri "/"] [unique_id "aih8OcFFJKJUQmDO4QXCugAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 19:06:37
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 15:06:30.039032 2026] [security2:error] [pid 21177:tid 21177] [client 43.156.71.125:39390] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bees.properties|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bees.properties"] [uri "/"] [unique_id "aihkNg7dAkwQ1QUbaaszFAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 18:29:21
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:29:16.243716 2026] [security2:error] [pid 20681:tid 20681] [client 43.156.71.125:59432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||yanchuk.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yanchuk.org"] [uri "/"] [unique_id "aihbfIMxK9uNm82cMtqyygAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2026-06-09 17:56:57
(1 week ago)
(mod_security-custom) mod_security (id:210350) triggered by 43.156.71.125 (SG/Singapore/-/Singapore/ ...
show more
(mod_security-custom) mod_security (id:210350) triggered by 43.156.71.125 (SG/Singapore/-/Singapore/-/[AS132203 TENCENT-NET-AP-CN Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs (0-srv1)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-09 17:39:37
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:39:31.402642 2026] [security2:error] [pid 29841:tid 29841] [client 43.156.71.125:45924] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.chatgptfrance.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chatgptfrance.net"] [uri "/"] [unique_id "aihP0wsP87g_HEv94tyASAAAAGI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 17:10:53
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:10:47.955152 2026] [security2:error] [pid 26183:tid 26183] [client 43.156.71.125:35410] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sangalgano.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sangalgano.info"] [uri "/"] [unique_id "aihJFxHOuKGymZwRYURYVQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 16:43:43
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.71.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:43:34.855497 2026] [security2:error] [pid 13559:tid 13559] [client 43.156.71.125:45724] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||4azadi.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "4azadi.org"] [uri "/"] [unique_id "aihCtqZyyeX7ztz5wdKubAAAABA"], referer: http://forazadi.org
show less
Brute-Force
Bad Web Bot
Web App Attack