2026-07-22 09:38:51
(5 days ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-07-22 01:59:45
(5 days ago)
20 attempts against mh-misbehave-ban on pavo
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-07 03:16:56
(5 months ago)
(mod_security) mod_security (id:210350) triggered by 91.223.133.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 91.223.133.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 22:16:48.421832 2026] [security2:error] [pid 2317:tid 2317] [client 91.223.133.215:28545] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bitcoinbtcshop.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bitcoinbtcshop.com"] [uri "/"] [unique_id "aYauoDsfLV-b8ZreszFRngAAAAg"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-24 00:43:23
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 91.223.133.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 91.223.133.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 23 19:43:15.943187 2026] [security2:error] [pid 1212616:tid 1212663] [client 91.223.133.215:63965] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "americanacademyofprojectmanagement.com"] [uri "/"] [unique_id "aXQVo4kS-qjZbADWiRi-MAAAAU8"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-31 06:11:36
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 91.223.133.215 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 91.223.133.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 02:11:33.298152 2025] [security2:error] [pid 12986:tid 12986] [client 91.223.133.215:51857] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.drbolen.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.drbolen.com"] [uri "/"] [unique_id "aQRTFXM9m6ChdywAmgrWRAAAAAg"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
exxos
2025-09-26 19:03:01
(10 months ago)
Attacks with Bad user agents
Hacking
🇧🇪
voormedia
2025-04-10 01:44:36
(1 year ago)
Accessed trap at '/wp-login.php'
Web App Attack
2025-03-01 13:59:37
(1 year ago)
wordpress-trap
Web App Attack
2025-02-24 22:28:58
(1 year ago)
wordpress-trap
Web App Attack
2025-02-24 14:00:39
(1 year ago)
wordpress-trap
Web App Attack
2024-11-28 13:33:35
(1 year ago)
Hacking
Hacking
Brute-Force
Web App Attack