🇺🇸
Charlesiv
2026-07-19 00:34:55
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from AT.
Action taken: BLOCK
ASN: 212238 (Datacamp Limited ...
show more
Triggered Cloudflare WAF (firewallCustom) from AT.
Action taken: BLOCK
ASN: 212238 (Datacamp Limited)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-07-18T22:21:46Z
Ray ID: a1d4e19b49ad5b5b
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-18 23:00:23
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 19:00:18.927249 2026] [security2:error] [pid 3862:tid 3862] [client 150.251.225.210:47239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||knoxbestos.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxbestos.com"] [uri "/contact.html"] [unique_id "alwFgr68SD6aZFCVM38JawAAAAc"], referer: https://www.hpccompressors.co.uk
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 22:03:28
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 18:03:21.074373 2026] [security2:error] [pid 29608:tid 29608] [client 150.251.225.210:38699] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||2ezgroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2ezgroup.com"] [uri "/"] [unique_id "alv4KVnhe94KGChjo-IergAAAAw"], referer: http://gzjiaoyangkj.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 21:41:42
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 17:41:38.390908 2026] [security2:error] [pid 2059:tid 2059] [client 150.251.225.210:59559] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||www.wolter-hausser.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wolter-hausser.com"] [uri "/contact.html"] [unique_id "alvzEkckZBTjrUACzzE5FQAAACQ"], referer: http://shgrtz.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 20:35:44
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 16:35:39.731312 2026] [security2:error] [pid 18795:tid 18795] [client 150.251.225.210:64627] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||drdot.xyz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drdot.xyz"] [uri "/"] [unique_id "alvjm3EAdBCnh20KWPfTdQAAAAQ"], referer: https://www.masterpartssolutions.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 20:11:58
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 16:11:51.531934 2026] [security2:error] [pid 647822:tid 647822] [client 150.251.225.210:53375] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||lahamradio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lahamradio.com"] [uri "/"] [unique_id "alveB4KVnxRbgP5y7rH_2QAAAAw"], referer: https://nanonutricion.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 19:51:32
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 15:51:24.491771 2026] [security2:error] [pid 27702:tid 27702] [client 150.251.225.210:30647] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||hierarchyofvalues.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hierarchyofvalues.org"] [uri "/"] [unique_id "alvZPM64nT-2x5nkb7xoVwAAAAM"], referer: https://echelonpathwayfoundation.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 19:33:54
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 15:33:50.774178 2026] [security2:error] [pid 7150:tid 7203] [client 150.251.225.210:57747] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||adt-sales.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adt-sales.com"] [uri "/"] [unique_id "alvVHtZXJuP9FnTQLlk0xQAAAZU"], referer: http://gzjiaoyangkj.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 19:14:05
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 15:13:57.458626 2026] [security2:error] [pid 25063:tid 25063] [client 150.251.225.210:43861] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||fruitsinthedesert.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fruitsinthedesert.com"] [uri "/"] [unique_id "alvQddnFu9CMCnAS5e_2CAAAAAI"], referer: http://infoconference.ru
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 18:53:13
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 14:53:08.480887 2026] [security2:error] [pid 10598:tid 10598] [client 150.251.225.210:51539] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||novavistafoundation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "novavistafoundation.org"] [uri "/"] [unique_id "alvLlC_wVDW6pyFII__r9QAAAA4"], referer: http://yummyride.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 17:46:51
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 13:46:44.740357 2026] [security2:error] [pid 19127:tid 19127] [client 150.251.225.210:53479] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||movafagh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "movafagh.com"] [uri "/"] [unique_id "alu8BNOjwZgs3FR7w46YigAAABY"], referer: https://www.felixboettcher.de
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 16:27:43
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 12:27:36.963930 2026] [security2:error] [pid 13534:tid 13587] [client 150.251.225.210:54701] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||julianositalianrestaurant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "julianositalianrestaurant.com"] [uri "/Calamari-red.html"] [unique_id "alupePQoYPbYuFfTjYFwWwAAAZU"], referer: http://lesscode.io
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 15:51:41
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:51:35.474065 2026] [security2:error] [pid 2518857:tid 2518857] [client 150.251.225.210:47415] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||providentbusinessllc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "providentbusinessllc.com"] [uri "/"] [unique_id "aluhB4JSIfawipqV7iscKgAAAAI"], referer: http://bitbucket-death.xyz
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 15:31:01
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:30:55.815915 2026] [security2:error] [pid 414091:tid 414091] [client 150.251.225.210:43329] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||miranda-race-walks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miranda-race-walks.com"] [uri "/"] [unique_id "alucL1g6Xtj7MIdd4R_fqgAAAA4"], referer: http://mymedicarehelper.net
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 14:30:44
(1 day ago)
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:220020) triggered by 150.251.225.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 10:30:40.376359 2026] [security2:error] [pid 15621:tid 15621] [client 150.251.225.210:63089] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(^|;)=(;|$)" at REQUEST_HEADERS:Cookie. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "74"] [id "220020"] [rev "2"] [msg "COMODO WAF: DoS vulnerability in Apache 2.2.17 - 2.2.21 (CVE-2012-0021)||eurocs2.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eurocs2.com"] [uri "/"] [unique_id "aluOEKG5588BqNRX8mtQBAAAAAE"], referer: https://viettask.net
show less
Brute-Force
Bad Web Bot
Web App Attack