🇺🇸
142.93.250.227
17 May 2025
(mod_security) mod_security (id:210492) triggered by 142.93.250.227 (US/United States/New Jersey/Nor ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.250.227 (US/United States/New Jersey/North Bergen/-/[AS14061 DIGITALOCEAN-ASN]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat May 17 03:25:29.476065 2025] [:error] [pid 1538644:tid 1538647] [client 142.93.250.227:40030] [client 142.93.250.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "216.244.65.67"] [uri "/.env"] [unique_id "aCg56fZsA341cKxFcjI8ZwAAAEA"]
show less
Port Scan
🇺🇸
170.106.35.187
17 May 2025
(mod_security) mod_security (id:210350) triggered by 170.106.35.187 (US/United States/Virginia/Ashbu ...
show more
(mod_security) mod_security (id:210350) triggered by 170.106.35.187 (US/United States/Virginia/Ashburn/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat May 17 02:17:05.681793 2025] [:error] [pid 1495498:tid 1495520] [client 170.106.35.187:35208] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCgp4bFImoMk81-o8q_SFgAAANQ"]
show less
Port Scan
🇺🇸
43.166.238.12
17 May 2025
(mod_security) mod_security (id:210350) triggered by 43.166.238.12 (US/United States/Virginia/Ashbur ...
show more
(mod_security) mod_security (id:210350) triggered by 43.166.238.12 (US/United States/Virginia/Ashburn/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat May 17 01:06:28.317488 2025] [:error] [pid 1495498:tid 1495517] [client 43.166.238.12:54778] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67:80|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCgZVLFImoMk81-o8q_RyQAAANE"]
show less
Port Scan
🇺🇸
166.1.173.135
16 May 2025
(bind) bind triggered by 166.1.173.135 (US/United States/-/-/166-1-173-135.ips.acedatacenter.com/[AS ...
show more
(bind) bind triggered by 166.1.173.135 (US/United States/-/-/166-1-173-135.ips.acedatacenter.com/[AS399820 ATOMIC-NETWORKS-1]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 16 16:33:32 derek named[1023]: client @0x7f9100118390 166.1.173.135#46805 (collectd.org): query (cache) 'collectd.org/ANY/IN' denied
show less
Port Scan
🇺🇸
170.106.11.6
16 May 2025
(mod_security) mod_security (id:210350) triggered by 170.106.11.6 (US/United States/Virginia/Ashburn ...
show more
(mod_security) mod_security (id:210350) triggered by 170.106.11.6 (US/United States/Virginia/Ashburn/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri May 16 13:51:26.740861 2025] [:error] [pid 1495498:tid 1495522] [client 170.106.11.6:60320] [client 170.106.11.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67:80|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCd7HrFImoMk81-o8q_QngAAANY"]
show less
Port Scan
🇺🇸
38.58.182.159
16 May 2025
(bind) bind triggered by 38.58.182.159 (US/United States/Utah/Draper/-/[AS26042 FIBERSTATE]): 1 in t ...
show more
(bind) bind triggered by 38.58.182.159 (US/United States/Utah/Draper/-/[AS26042 FIBERSTATE]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 16 10:12:47 derek named[1023]: client @0x7f91000bfaf0 38.58.182.159#15592 (sl): query (cache) 'sl/ANY/IN' denied
show less
Port Scan
🇳🇱
154.81.179.80
16 May 2025
(bind) bind triggered by 154.81.179.80 (US/United States/-/-/-/[AS60223 Netiface Limited]): 1 in the ...
show more
(bind) bind triggered by 154.81.179.80 (US/United States/-/-/-/[AS60223 Netiface Limited]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 16 09:46:22 derek named[1023]: client @0x7f9100118390 154.81.179.80#22159 (sl): query (cache) 'sl/ANY/IN' denied
show less
Port Scan
🇺🇸
43.166.245.120
16 May 2025
(mod_security) mod_security (id:210350) triggered by 43.166.245.120 (US/United States/Virginia/Ashbu ...
show more
(mod_security) mod_security (id:210350) triggered by 43.166.245.120 (US/United States/Virginia/Ashburn/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri May 16 07:19:14.440919 2025] [:error] [pid 1495498:tid 1495511] [client 43.166.245.120:50470] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCcfMrFImoMk81-o8q_PxQAAAMs"]
show less
Port Scan
🇺🇸
49.51.233.95
16 May 2025
(mod_security) mod_security (id:210350) triggered by 49.51.233.95 (US/United States/California/Santa ...
show more
(mod_security) mod_security (id:210350) triggered by 49.51.233.95 (US/United States/California/Santa Clara/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri May 16 06:19:32.014120 2025] [:error] [pid 1495498:tid 1495511] [client 49.51.233.95:40784] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67:80|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCcRNLFImoMk81-o8q_PhAAAAMs"]
show less
Port Scan
🇺🇸
44.220.188.56
16 May 2025
(bind) bind triggered by 44.220.188.56 (US/United States/Virginia/Ashburn/ec2-44-220-188-56.compute- ...
show more
(bind) bind triggered by 44.220.188.56 (US/United States/Virginia/Ashburn/ec2-44-220-188-56.compute-1.amazonaws.com/[AS14618 AMAZON-AES]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 16 02:38:05 derek named[1023]: client @0x7f90f0005c30 44.220.188.56#46930 (cdn.jsdelivr.net): query (cache) 'cdn.jsdelivr.net/A/IN' denied
show less
Port Scan
🇺🇸
44.220.188.57
16 May 2025
(bind) bind triggered by 44.220.188.57 (US/United States/Virginia/Ashburn/ec2-44-220-188-57.compute- ...
show more
(bind) bind triggered by 44.220.188.57 (US/United States/Virginia/Ashburn/ec2-44-220-188-57.compute-1.amazonaws.com/[AS14618 AMAZON-AES]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 16 02:33:07 derek named[1023]: client @0x7f91000bfaf0 44.220.188.57#48520 (cloud.ibm.com): query (cache) 'cloud.ibm.com/A/IN' denied
show less
Port Scan
🇺🇸
45.79.207.252
16 May 2025
(bind) bind triggered by 45.79.207.252 (US/United States/Georgia/Atlanta/45-79-207-252.ip.linodeuser ...
show more
(bind) bind triggered by 45.79.207.252 (US/United States/Georgia/Atlanta/45-79-207-252.ip.linodeusercontent.com/[AS63949 Akamai Connected Cloud]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 22:33:29 derek named[1023]: client @0x7f9100126f80 45.79.207.252#37201 (stackoverflow.com): query (cache) 'stackoverflow.com/A/IN' denied
show less
Port Scan
🇺🇸
43.153.123.3
16 May 2025
(mod_security) mod_security (id:210350) triggered by 43.153.123.3 (US/United States/California/Santa ...
show more
(mod_security) mod_security (id:210350) triggered by 43.153.123.3 (US/United States/California/Santa Clara/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu May 15 22:10:57.963463 2025] [:error] [pid 1460524:tid 1460603] [client 43.153.123.3:37952] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCaeseYAl8B64Lo1cs4hOwAAAJc"]
show less
Port Scan
🇺🇸
107.151.208.210
16 May 2025
(XMLRPC) WP XMLPRC Attack 107.151.208.210 (US/United States/-/-/-/[AS62610 ZEN-DPS]): 1 in the last ...
show more
(XMLRPC) WP XMLPRC Attack 107.151.208.210 (US/United States/-/-/-/[AS62610 ZEN-DPS]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 107.151.208.210 - - [15/May/2025:21:30:20 -0400] "GET /xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
show less
Port Scan
🇺🇸
170.106.143.6
15 May 2025
(mod_security) mod_security (id:210350) triggered by 170.106.143.6 (US/United States/California/Sant ...
show more
(mod_security) mod_security (id:210350) triggered by 170.106.143.6 (US/United States/California/Santa Clara/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu May 15 19:46:15.244014 2025] [:error] [pid 1460625:tid 1460642] [client 170.106.143.6:38234] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67:80|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCZ8x8t7bctinjUOzkp5yQAAAM8"]
show less
Port Scan
🇺🇸
18.191.94.169
15 May 2025
(bind) bind triggered by 18.191.94.169 (US/United States/Ohio/Columbus/ec2-18-191-94-169.us-east-2.c ...
show more
(bind) bind triggered by 18.191.94.169 (US/United States/Ohio/Columbus/ec2-18-191-94-169.us-east-2.compute.amazonaws.com/[AS16509 AMAZON-02]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 09:10:09 derek named[1023]: client @0x7f91000bfaf0 18.191.94.169#42614 (version.server): query (cache) 'version.server/TXT/CH' denied
show less
Port Scan
🇺🇸
170.106.180.139
15 May 2025
(mod_security) mod_security (id:210350) triggered by 170.106.180.139 (US/United States/California/Sa ...
show more
(mod_security) mod_security (id:210350) triggered by 170.106.180.139 (US/United States/California/Santa Clara/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu May 15 09:03:52.584565 2025] [:error] [pid 1427551:tid 1427582] [client 170.106.180.139:53812] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67:80|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCXmOChho654jRaXZJVOIAAAAIM"]
show less
Port Scan
🇺🇸
205.185.120.120
15 May 2025
(bind) bind triggered by 205.185.120.120 (US/United States/Nevada/Las Vegas/-/[AS53667 PONYNET]): 1 ...
show more
(bind) bind triggered by 205.185.120.120 (US/United States/Nevada/Las Vegas/-/[AS53667 PONYNET]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 08:45:00 derek named[1023]: client @0x7f91001097a0 205.185.120.120#49275 (sl): query (cache) 'sl/ANY/IN' denied
show less
Port Scan
🇺🇸
44.220.185.193
15 May 2025
(bind) bind triggered by 44.220.185.193 (US/United States/Virginia/Ashburn/ec2-44-220-185-193.comput ...
show more
(bind) bind triggered by 44.220.185.193 (US/United States/Virginia/Ashburn/ec2-44-220-185-193.compute-1.amazonaws.com/[AS14618 AMAZON-AES]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 06:36:03 derek named[1023]: client @0x7f9100126f80 44.220.185.193#51692 (github.com): query (cache) 'github.com/A/IN' denied
show less
Port Scan
🇺🇸
44.220.188.219
15 May 2025
(bind) bind triggered by 44.220.188.219 (US/United States/Virginia/Ashburn/ec2-44-220-188-219.comput ...
show more
(bind) bind triggered by 44.220.188.219 (US/United States/Virginia/Ashburn/ec2-44-220-188-219.compute-1.amazonaws.com/[AS14618 AMAZON-AES]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 06:34:44 derek named[1023]: client @0x7f91001097a0 44.220.188.219#36164 (bitbucket.org): query (cache) 'bitbucket.org/A/IN' denied
show less
Port Scan
🇺🇸
45.61.184.173
15 May 2025
(bind) bind triggered by 45.61.184.173 (US/United States/Florida/Miami/-/[AS53667 PONYNET]): 1 in th ...
show more
(bind) bind triggered by 45.61.184.173 (US/United States/Florida/Miami/-/[AS53667 PONYNET]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 05:15:11 derek named[1023]: client @0x7f9100118390 45.61.184.173#56271 (sl): query (cache) 'sl/ANY/IN' denied
show less
Port Scan
🇺🇸
205.185.120.120
15 May 2025
(bind) bind triggered by 205.185.120.120 (US/United States/Nevada/Las Vegas/-/[AS53667 PONYNET]): 1 ...
show more
(bind) bind triggered by 205.185.120.120 (US/United States/Nevada/Las Vegas/-/[AS53667 PONYNET]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 04:06:04 derek named[1023]: client @0x7f9100118390 205.185.120.120#40483 (sl): query (cache) 'sl/ANY/IN' denied
show less
Port Scan
🇺🇸
65.49.1.31
15 May 2025
(bind) bind triggered by 65.49.1.31 (US/United States/-/-/31.0-24.1.49.65.in-addr.arpa/[AS6939 HURRI ...
show more
(bind) bind triggered by 65.49.1.31 (US/United States/-/-/31.0-24.1.49.65.in-addr.arpa/[AS6939 HURRICANE]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 03:52:45 derek named[1023]: client @0x7f91000dcff0 65.49.1.31#56955 (dnsscan.shadowserver.org): query (cache) 'dnsscan.shadowserver.org/A/IN' denied
show less
Port Scan
🇺🇸
43.135.142.7
15 May 2025
(mod_security) mod_security (id:210350) triggered by 43.135.142.7 (US/United States/California/Santa ...
show more
(mod_security) mod_security (id:210350) triggered by 43.135.142.7 (US/United States/California/Santa Clara/-/[AS132203 Tencent Building, Kejizhongyi Avenue]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu May 15 03:20:38.009460 2025] [:error] [pid 1425628:tid 1425697] [client 43.135.142.7:51686] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||216.244.65.67|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "216.244.65.67"] [uri "/"] [unique_id "aCWVxjjJfriuvPQVycgtVwAAAI0"]
show less
Port Scan
🇺🇸
198.98.58.108
15 May 2025
(bind) bind triggered by 198.98.58.108 (US/United States/New York/Staten Island/-/[AS53667 PONYNET]) ...
show more
(bind) bind triggered by 198.98.58.108 (US/United States/New York/Staten Island/-/[AS53667 PONYNET]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 15 02:47:12 derek named[1023]: client @0x7f9100118390 198.98.58.108#41343 (collectd.org): query (cache) 'collectd.org/ANY/IN' denied
show less
Port Scan