🇨🇭
backslash
2026-11-14 05:21:00
UTC ·
(2 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-11 15:17:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:17:25.361159 2026] [security2:error] [pid 18935:tid 18935] [client 64.49.36.54:60875] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:17:25.361159 2026] [security2:error] [pid 18935:tid 18935] [client 64.49.36.54:60875] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/02/14/oregon-governor-resigns-in-widening-ethics-scandal/"] [unique_id "avSHBUwEbLuFTPygPaGf0QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 10:10:10
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:09:56.501917 2026] [security2:error] [pid 17593:tid 17593] [client 64.49.36.54:58449] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:09:56.501917 2026] [security2:error] [pid 17593:tid 17593] [client 64.49.36.54:58449] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/dr-gary-tipton-joins-our-love-and-logic-parenting-team/"] [unique_id "avLtdKeGUL0vHYda4jycMAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:37:40
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:37:33.885917 2026] [security2:error] [pid 10615:tid 10615] [client 64.49.36.54:22809] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:37:33.885917 2026] [security2:error] [pid 10615:tid 10615] [client 64.49.36.54:22809] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seskalee.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seskalee.com"] [uri "/my-favourite-simple-living-youtubers/"] [unique_id "avJ1XSAs7DVfjBsVvsP4ZwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:38:49
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:38:42.423824 2026] [security2:error] [pid 25335:tid 25335] [client 64.49.36.54:17539] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.36.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:38:42.423824 2026] [security2:error] [pid 25335:tid 25335] [client 64.49.36.54:17539] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||somuchtoread.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "somuchtoread.com"] [uri "/2018.php"] [unique_id "atDJUknxLb3-WoatUHyjsgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-07-15 00:10:03
UTC ·
(3 months ago)
2026/07/15 00:08:50 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇩🇪
BlueWire Hosting
2026-07-03 00:20:17
UTC ·
(4 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TRoden
2026-04-16 15:08:18
UTC ·
(6 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
🇫🇷
Tilellit.PRO
2026-02-12 07:59:12
UTC ·
(9 months ago)
Fail2Ban banned 64.49.36.54 for security violations in jail wp-armour. Log: 2026/02/12 07:59:11 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 64.49.36.54 | Target: wplogin" , client: 64.49.36.54, server: [REDACTED], request: "POST ...
show more
Fail2Ban banned 64.49.36.54 for security violations in jail wp-armour. Log: 2026/02/12 07:59:11 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 64.49.36.54 | Target: wplogin" , client: 64.49.36.54, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-02-06 18:00:16
UTC ·
(9 months ago)
Fail2Ban banned 64.49.36.54 for security violations in jail wp-armour. Log: 2026/02/06 18:00:16 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 64.49.36.54 | Target: wplogin" , client: 64.49.36.54, server: [REDACTED], request: "POST ...
show more
Fail2Ban banned 64.49.36.54 for security violations in jail wp-armour. Log: 2026/02/06 18:00:16 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 64.49.36.54 | Target: wplogin" , client: 64.49.36.54, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
2026-02-05 03:07:38
UTC ·
(9 months ago)
(XMLRPC) WP XMLPRC Attack 64.49.36.54 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1
Brute-Force
SSH
2026-01-30 19:23:28
UTC ·
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.30 is noted in report timestamp
Hacking
Brute-Force
🇦🇺
oncord
2026-01-22 17:33:37
UTC ·
(9 months ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2025-12-18 09:38:24
UTC ·
(10 months ago)
(From [email protected] ) Hi there,
We know how to help you dominate Google Maps.
It’s no secret that the businesses dominating Google Maps aren’t guessing—they’re using data. Paige reads Google’s algorithm like a roadmap, uncovering ran ...
show more
(From [email protected] ) Hi there,
We know how to help you dominate Google Maps.
It’s no secret that the businesses dominating Google Maps aren’t guessing—they’re using data. Paige reads Google’s algorithm like a roadmap, uncovering ranking factors that most business owners never think about.
With one quick scan, Paige reveals exactly what’s holding your listing back and how to fix it before your competition takes your spot for good. In today’s digital marketplace, visibility equals opportunity, and opportunity means more customers at your door.
Don’t lose another lead to a competitor who simply acted faster. Run your scan today and discover what Paige can show you. Visit https://bit.ly/paigetool
Let’s rock
When you prefer not to get future messages from this campaign, just fill the form at bit. ly/fillunsubform with your domain address (URL).
Benedenkerkseweg 57, Bath, CA, USA, 93270
show less
Phishing
Web Spam
🇩🇪
big-cloud.nl
2025-12-17 04:47:39
UTC ·
(10 months ago)
Try to access /xmlrpc.php
Web App Attack
