🇳🇱
GES
2026-10-21 07:44:24
(1 day ago)
Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.
DDoS Attack
Port Scan
2026-10-21 02:15:25
(2 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-20 16:34:08
(2 days ago)
Not following 301 redirects — wasted requests | method: GET | path: https://dhsdigital.eu/wp-content ...
show more
Not following 301 redirects — wasted requests | method: GET | path: https://dhsdigital.eu/wp-content/et-cache/notfound/et-divi-dynamic-tb-356872-tb-64207-tb-357419.css | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 | 2026-10-20 16:34 UTC
show less
Bad Web Bot
2026-10-20 00:46:25
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇫🇷
Murazaki
2026-10-18 21:59:17
(4 days ago)
lemmy.balamb.fr 143.246.53.27 - - [18/Oct/2026:23:59:16 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1 ...
show more
lemmy.balamb.fr 143.246.53.27 - - [18/Oct/2026:23:59:16 +0200] "CONNECT lemmy.balamb.fr:443 HTTP/1.1" 405 150 "-" "-" "-"
...
show less
Hacking
2026-10-18 18:14:48
(4 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 03:36:16
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:36:10.519514 2026] [security2:error] [pid 7610:tid 7610] [client 143.246.53.27:43459] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||spacebooger.com:443|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "spacebooger.com"] [uri "/"] [unique_id "atQ-qrcXcJHyYTUBcTbe1QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:51:14
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:51:06.757427 2026] [security2:error] [pid 31547:tid 31547] [client 143.246.53.27:56281] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||gotdt.com:443|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "gotdt.com"] [uri "/"] [unique_id "atDoWnDKqPdqBBV_ppw65wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:04:17
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:04:10.077594 2026] [security2:error] [pid 14197:tid 14197] [client 143.246.53.27:4807] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||eandgenergy.com:443|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "eandgenergy.com"] [uri "/"] [unique_id "atDdWgJiot0daabijM3G2QAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:25:10
(1 week ago)
(mod_security) mod_security (id:217210) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:217210) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:25:01.961649 2026] [security2:error] [pid 5132:tid 5132] [client 143.246.53.27:47725] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||www.worthhistory.org:443|F|4"] [data "CONNECT www.worthhistory.org:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.worthhistory.org"] [uri "/"] [unique_id "atDGHXxrllzM3MOQEPVfnAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 03:26:01
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 23:25:53.637643 2026] [security2:error] [pid 22114:tid 22114] [client 143.246.53.27:50455] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||jdubindustries.com:443|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "jdubindustries.com"] [uri "/"] [unique_id "atBHwUhlRh4dkwySFA9eJgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 20:08:09
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:08:00.849781 2026] [security2:error] [pid 19556:tid 19556] [client 143.246.53.27:45079] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||myndsong.com:443|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "myndsong.com"] [uri "/"] [unique_id "as_hIIwf4nJRfo_GccoCnAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 18:57:46
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 143.246.53.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:57:42.869265 2026] [security2:error] [pid 15768:tid 15768] [client 143.246.53.27:64635] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||drrw.net:443|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "drrw.net"] [uri "/"] [unique_id "as_QpsoI-7GrYE3YxJWbRgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 07:52:35
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-13 18:27:39
(1 week ago)
Not following 301 redirects — wasted requests | method: GET | path: https://www.jeudhistoire.com/tag ...
show more
Not following 301 redirects — wasted requests | method: GET | path: https://www.jeudhistoire.com/tag/peinture/ | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 | 2026-10-13 18:27 UTC
show less
Bad Web Bot