🇩🇪
Jochen Pretli
2026-10-15 04:11:11
(2 hours ago)
connection to honeypot
Email Spam
Port Scan
🇸🇪
SkyDancer
2026-10-15 04:11:07
(2 hours ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇺🇸
mnsf
2026-10-15 02:05:39
(4 hours ago)
Request Overload (104)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 18:54:41
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:54:35.359150 2026] [security2:error] [pid 2937:tid 2937] [client 82.156.77.25:46068] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.achari.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.achari.com"] [uri "/"] [unique_id "as_P6zmi4YcMe8gI5-jgLgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 18:23:40
(12 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:23:31.774117 2026] [security2:error] [pid 14130:tid 14130] [client 82.156.77.25:56194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||endemic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "endemic.com"] [uri "/"] [unique_id "as_Io-h3fX5qxrwPro7NIwAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 16:44:11
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:43:56.502595 2026] [security2:error] [pid 12590:tid 12590] [client 82.156.77.25:54856] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||casagrotto.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "casagrotto.com"] [uri "/"] [unique_id "as-xTBsu3XNHblMTp94bcgAAAAU"], referer: http://casagrotto.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:48:33
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:48:29.772963 2026] [security2:error] [pid 14874:tid 14874] [client 82.156.77.25:56694] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||puckerbuttbikinis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "puckerbuttbikinis.com"] [uri "/"] [unique_id "as96HUnLJX5svrZF73E6HwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:51:42
(19 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:51:37.863242 2026] [security2:error] [pid 20251:tid 20251] [client 82.156.77.25:41860] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gaudensinnovo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gaudensinnovo.com"] [uri "/"] [unique_id "as9eufg8Lz4JpOv_jumDygAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ut-addicted.com
2026-10-14 10:22:27
(20 hours ago)
\[14/Oct/2026:12:22:09 +0200\] as9X0XKq2Rr8LGuCFzGFQAAAAMI 82.156.77.25 58278 78.46.187.162 80
\[14/ ...
show more
\[14/Oct/2026:12:22:09 +0200\] as9X0XKq2Rr8LGuCFzGFQAAAAMI 82.156.77.25 58278 78.46.187.162 80
\[14/Oct/2026:12:22:10 +0200\] as9X0nKq2Rr8LGuCFzGFRAAAAMY 82.156.77.25 33882 78.46.187.162 443
\[14/Oct/2026:12:22:25 +0200\] as9X2HKq2Rr8LGuCFzGFSQAAANQ 82.156.77.25 38642 78.46.187.162 443
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:19:27
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:19:19.958453 2026] [security2:error] [pid 438:tid 438] [client 82.156.77.25:44918] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||riverflow.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "riverflow.com"] [uri "/1950snostalgia"] [unique_id "as9XJ7lVqLmEqVtL6oiOnwAAAAI"], referer: http://www.1950snostalgia.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-10-14 10:07:33
(20 hours ago)
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from CN.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-14 09:37:05
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:37:01.520079 2026] [security2:error] [pid 1806:tid 1806] [client 82.156.77.25:52748] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.theknowledgemaster.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.theknowledgemaster.com"] [uri "/"] [unique_id "as9NPbedJgvBN44evsoPsAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 09:02:11
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:02:05.948863 2026] [security2:error] [pid 30733:tid 30733] [client 82.156.77.25:47906] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.kooroshvaziri.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kooroshvaziri.com"] [uri "/"] [unique_id "as9FDamWKws4_tj1gcdKMAAAAAY"], referer: http://www.kvaziri.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-10-14 08:58:15
(21 hours ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.996 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.996 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-14 08:40:56
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 82.156.77.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 04:40:48.574429 2026] [security2:error] [pid 29623:tid 29649] [client 82.156.77.25:47128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kimbleproperties.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kimbleproperties.com"] [uri "/"] [unique_id "as9AEIVvIuCZXRoDPqUkSwAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
