🇫🇮
inlink.ltd
2026-11-11 15:42:22
UTC ·
(17 hours ago)
pdf scraper
Bad Web Bot
🇺🇸
kosada.com
2026-11-11 10:50:22
UTC ·
(22 hours ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=60&topics%5B5%5D=48&topics%5B6%5D=45&topics%5B7%5D=34 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=60&topics%5B5%5D=48&topics%5B6%5D=45&topics%5B7%5D=34 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:128.0) Gecko/20100101 Firefox/128.0")
show less
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-10 14:27:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 103.129.212.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:27:28.541872 2026] [security2:error] [pid 15982:tid 15982] [client 103.129.212.209:2276 ...
show more
(mod_security) mod_security (id:225170) triggered by 103.129.212.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:27:28.541872 2026] [security2:error] [pid 15982:tid 15982] [client 103.129.212.209:22761] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lusineweb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lusineweb.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "avMp0Eg4saOjLuzW-HojSgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 10:56:52
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 103.129.212.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:56:46.947739 2026] [security2:error] [pid 8891:tid 8891] [client 103.129.212.209:47212] ...
show more
(mod_security) mod_security (id:210350) triggered by 103.129.212.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:56:46.947739 2026] [security2:error] [pid 8891:tid 8891] [client 103.129.212.209:47212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||citizensforsanity.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "citizensforsanity.com"] [uri "/"] [unique_id "au8D7nDkkTDnLhqnO4prygAAABQ"], referer: https://helpelectchris.com/creative-loafing-magazine
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2026-11-06 05:16:34
UTC ·
(6 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-06T05:16:34Z.
Bad Web Bot
🇩🇪
LRob
2026-11-05 11:57:00
UTC ·
(6 days ago)
Shop search flood (L7 DDoS) | path: /3-velos | query: q=Marque-Orbea/Famille-Laufey/Taille-L | src_port: 60006
DDoS Attack
Web App Attack
2026-11-04 08:49:57
UTC ·
(1 week ago)
Automated report (2026-11-04T03:49:57-05:00). Scraper detected.
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-03 10:29:10
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-03T10:29:10Z.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-02 02:11:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 103.129.212.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 21:11:10.622868 2026] [security2:error] [pid 7326:tid 7326] [client 103.129.212.209:51220] ...
show more
(mod_security) mod_security (id:210350) triggered by 103.129.212.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 21:11:10.622868 2026] [security2:error] [pid 7326:tid 7326] [client 103.129.212.209:51220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pist.org.tr|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pist.org.tr"] [uri "/"] [unique_id "aufxPgEMjydb-husjSMYfwAAAAw"], referer: https://cengiztekin.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
