🇮🇩
bps-statistics
2026-11-09 17:20:31
UTC ·
(2 days ago)
Web Application Attacks
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:33:17
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:33:14.488962 2026] [security2:error] [pid 21887:tid 21887] [client 62.204.49.73:34241] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:33:14.488962 2026] [security2:error] [pid 21887:tid 21887] [client 62.204.49.73:34241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fluff3.instagenii.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fluff3.instagenii.com"] [uri "/privacy-policy/"] [unique_id "avAXqkrmHIVjKUzTFpE1AQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 00:15:34
UTC ·
(5 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 19:44:03
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:43:56.264984 2026] [security2:error] [pid 14433:tid 14433] [client 62.204.49.73:40403] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:43:56.264984 2026] [security2:error] [pid 14433:tid 14433] [client 62.204.49.73:40403] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/speaker/tuality-healthcare-foundation/"] [unique_id "auo5fIOI-xz0hr26mqtuMwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:40:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:39:59.129891 2026] [security2:error] [pid 27805:tid 27805] [client 62.204.49.73:15105] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:39:59.129891 2026] [security2:error] [pid 27805:tid 27805] [client 62.204.49.73:15105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/romper.html"] [unique_id "auktX5leNouBG0kbXz7EMwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-01 06:58:53
UTC ·
(1 week ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇫🇷
ingroscart.it
2026-10-31 04:36:24
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇩🇪
MusicLibrary
2026-10-31 03:13:04
UTC ·
(1 week ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-15 14:11:55
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:11:50.352280 2026] [security2:error] [pid 30370:tid 30370] [client 62.204.49.73:58619] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.204.49.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:11:50.352280 2026] [security2:error] [pid 30370:tid 30370] [client 62.204.49.73:58619] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jetzilla.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jetzilla.com"] [uri "/Vol01Num02/jetZilla.html"] [unique_id "atDfJqNMFWv0uhEl4CTRMgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2026-09-24 02:53:11
UTC ·
(1 month ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇳🇿
Tripwire
2026-09-15 16:08:59
UTC ·
(1 month ago)
Wordpress login attempts
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
--KBXX--
2026-06-29 22:12:00
UTC ·
(4 months ago)
Brute-Force
🇨🇭
backslash
2025-11-19 17:00:44
UTC ·
(11 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇿
lp
2025-02-07 02:50:13
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 62.204.49.73
2025-02-07T02:57:31+01:00 vpn Access-Reject 'monopoly' station: 62.204.49.73 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 62.204.49.73
2025-02-07T02:57:31+01:00 vpn Access-Reject 'monopoly' station: 62.204.49.73 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
