🇫🇷
Sklurk
2026-11-06 01:11:43
UTC ·
(4 days ago)
Web App Attack
Web App Attack
🇮🇹
sssrit
2026-11-03 02:20:10
UTC ·
(1 week ago)
91.245.236.166 - - [03/Nov/2026:03:20:09 +0100] "GET /il-continuo-walzer-della-politica-se-ne-infischiano-dei-referendum/ HTTP/1.1" 404 13431 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safa ...
show more
91.245.236.166 - - [03/Nov/2026:03:20:09 +0100] "GET /il-continuo-walzer-della-politica-se-ne-infischiano-dei-referendum/ HTTP/1.1" 404 13431 "-" "Mozilla/5.0 (X11; CrOS x86_64 14816.131.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:05:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 91.245.236.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:05:36.703991 2026] [security2:error] [pid 22874:tid 22874] [client 91.245.236.166:15257] ...
show more
(mod_security) mod_security (id:210350) triggered by 91.245.236.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:05:36.703991 2026] [security2:error] [pid 22874:tid 22874] [client 91.245.236.166:15257] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thekingtones.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thekingtones.com"] [uri "/memora5.htm"] [unique_id "auJjoAdFBcyukvFlW5XSgwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 16:41:13
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.245.236.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:41:08.702158 2026] [security2:error] [pid 9222:tid 9222] [client 91.245.236.166:54961] M ...
show more
(mod_security) mod_security (id:210350) triggered by 91.245.236.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:41:08.702158 2026] [security2:error] [pid 9222:tid 9222] [client 91.245.236.166:54961] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||n3fjp.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "n3fjp.com"] [uri "/160meter.html"] [unique_id "at-CpL0rAVEmLB2RAJHE-wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 13:28:38
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 91.245.236.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:28:31.378290 2026] [security2:error] [pid 11469:tid 11469] [client 91.245.236.166:24169] ...
show more
(mod_security) mod_security (id:210350) triggered by 91.245.236.166 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:28:31.378290 2026] [security2:error] [pid 11469:tid 11469] [client 91.245.236.166:24169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||soviaenterprises.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "soviaenterprises.com"] [uri "/manninglandservices.com/"] [unique_id "attg_947NYjE5LkA5yoqDwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-20 22:25:45
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-19 22:24:12
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-09-19 11:06:17
UTC ·
(1 month ago)
Fail2Ban: WordPress brute-force attack detected.
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-11 00:10:02
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇪🇸
librebit
2026-07-16 17:24:58
UTC ·
(3 months ago)
Brute force
Brute-Force
🇸🇬
securejdprop
2026-07-08 11:01:53
UTC ·
(4 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
🇨🇦
leithzz
2026-05-23 04:38:10
UTC ·
(5 months ago)
Report by Cloudflare.Time: 2026-05-23T04:36:26Z
DDoS Attack
🇺🇸
kosada.com
2026-05-22 14:17:21
UTC ·
(5 months ago)
Web password guessing
Brute-Force
