🇳🇱
homeshowdomain.nl
2026-06-13 21:59:10
(3 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-12.
show less
Web App Attack
SSH
Hacking
🇺🇸
mnsf
2026-06-12 01:05:46
(3 months ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-01-17 18:08:08
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 17 13:08:00.879655 2025] [security2:error] [pid 3191879:tid 3191879] [client 80.76.49.23:59800] [client 80.76.49.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.neff.family.name|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.neff.family.name"] [uri "/unwiki/doku.php"] [unique_id "Z4qcgCE0G_9oaghjsCKvIwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-17 17:01:11
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 17 12:01:04.383395 2025] [security2:error] [pid 7290:tid 7290] [client 80.76.49.23:52479] [client 80.76.49.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.laboquimia.es|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.laboquimia.es"] [uri "/catalogo/producto.php"] [unique_id "Z4qM0HERMzaWs9kcfU-60AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-17 16:30:12
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 17 11:30:06.374672 2025] [security2:error] [pid 2656342:tid 2656342] [client 80.76.49.23:58712] [client 80.76.49.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oualierealty.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oualierealty.com"] [uri "/index.php"] [unique_id "Z4qFjhx0VMY56sIntAYKHwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-14 07:02:28
(1 year ago)
Web attack
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-01-14 06:01:12
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
conseilgouz
2025-01-14 05:14:57
(1 year ago)
coe-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/3-joomla?Itemid= ...
show more
coe-12 : Block return, carriage return, ... characters=>/component/weblinks/weblink/3-joomla?Itemid=316&Itemid=%27&catid=11&task=weblink.go(')
show less
Hacking
🇫🇮
tjs
2025-01-13 10:40:00
(1 year ago)
web attack
Hacking
Web App Attack
2025-01-13 03:02:17
(1 year ago)
Web attack
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-13 02:27:54
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 80.76.49.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 12 21:27:47.162792 2025] [security2:error] [pid 14541:tid 14541] [client 80.76.49.23:51829] [client 80.76.49.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "Z4R6I0i9XVQUgyYmIFCfoQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
penjaga BRIN
2025-01-12 15:03:17
(1 year ago)
SQL injection attempt.-112
Web App Attack
🇧🇾
StatsMe
2024-08-16 21:14:05
(2 years ago)
2024-08-16T04:58:37.113130+0300
GPL POLICY udp port 0 traffic
Port Scan
2024-08-16 14:51:57
(2 years ago)
fail2ban:piguard2:14,18
Port Scan
Brute-Force
🇯🇵
Kinsei Engineering Inc.
2024-08-16 14:26:56
(2 years ago)
UFW:High-frequency access to unused ports
Port Scan