|
🇩🇪
Ba-Yu
|
|
General hacking/exploits/scanning
|
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 64.49.39.153 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.39.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:10:01.569618 2026] [security2:error] [pid 2024:tid 2024] [client 64.49.39.153:59629] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||register-yacht-belize.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "register-yacht-belize.com"] [uri "/adminer/"] [unique_id "ai3_acz0vFHDuMl-fbyPRAAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇬🇧
Mendip_Defender
|
|
64.49.39.153 - - [14/Jun/2026:01:33:42 +0100] "GET /adminer/index.php HTTP/1.1" 301 5708 "https://4x ...
show more
64.49.39.153 - - [14/Jun/2026:01:33:42 +0100] "GET /adminer/index.php HTTP/1.1" 301 5708 "https://4x4response.uk/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
64.49.39.153 - - [14/Jun/2026:01:33:43 +0100] "GET /adminer/ HTTP/1.1" 404 51186 "https://4x4response.uk/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
64.49.39.153 - - [14/Jun/2026:01:33:44 +0100] "GET /adminer/index.php HTTP/1.1" 301 162 "https://4x4response.uk/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
...
show less
|
Hacking
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 64.49.39.153 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 64.49.39.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 14:54:04.261284 2026] [security2:error] [pid 21106:tid 21106] [client 64.49.39.153:37475] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jeffreycopeland.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeffreycopeland.com"] [uri "/_adminer.php"] [unique_id "ai2nTJiqAjhlySO-hgqJPQAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Illegitimate and/or suspicious requests.
|
Hacking
|
|
|
🇱🇻
garmtech.com
|
|
IM360 WAF: Attempt to upload malware
|
Hacking
|
|
|
🇱🇻
garmtech.com
|
|
IM360 WAF: Attempt to upload malware
|
Hacking
|
|
|
🇱🇻
garmtech.com
|
|
IM360 WAF: Attempt to upload malware
|
Hacking
|
|
|
🇺🇸
entangled_mongoose
|
|
Probed /wp-login.php.
|
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
|
Bad Web Bot
|
|
|
🇺🇸
fbarela
|
|
FortiGate SSL VPN login failures.
|
Hacking
Brute-Force
|
|
|
🇺🇸
mind5t0rm
|
|
(WPLOGIN) WP Login Attack 64.49.39.153 (US/United States/64-49-39-153.cloudairone.com): 3 in the las ...
show more
(WPLOGIN) WP Login Attack 64.49.39.153 (US/United States/64-49-39-153.cloudairone.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 64.49.39.153 - - [18/Oct/2025:16:35:47 +0700] "GET /wp-login.php HTTP/1.1" 200 2627 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
64.49.39.153 - - [18/Oct/2025:16:36:06 +0700] "POST /wp-login.php HTTP/1.1" 200 3218 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
64.49.39.153 - - [18/Oct/2025:16:36:15 +0700] "POST /wp-login.php HTTP/1.1" 200 2829 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
show less
|
Port Scan
|
|