🇺🇸
TPI-Abuse
2026-11-14 12:48:28
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:48:22.035523 2026] [security2:error] [pid 5026:tid 5026] [client 155.212.36.19:64063] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:48:22.035523 2026] [security2:error] [pid 5026:tid 5026] [client 155.212.36.19:64063] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gpusa-ca.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gpusa-ca.com"] [uri "/blog/new-headquarters/"] [unique_id "avhYlsqhCH1E1xwXRBm-rQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-11 01:38:36
UTC ·
(4 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /custom-wood-dining-tables/custom-wood-furniture-maine-makers-fine/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari ...
show more
Not following 301 redirects — wasted requests | method: GET | path: /custom-wood-dining-tables/custom-wood-furniture-maine-makers-fine/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Safari/605.1.15
show less
Bad Web Bot
🇪🇸
librebit
2026-11-10 02:42:09
UTC ·
(5 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-08 01:09:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:09:10.022469 2026] [security2:error] [pid 19679:tid 19679] [client 155.212.36.19:58651] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:09:10.022469 2026] [security2:error] [pid 19679:tid 19679] [client 155.212.36.19:58651] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||affordablehomegoods.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "affordablehomegoods.com"] [uri "/source/gun_cabinets/693.htm"] [unique_id "au_Ltjxa3FWrgoK1AGtQxwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:29:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:29:08.252301 2026] [security2:error] [pid 6683:tid 6683] [client 155.212.36.19:28461] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:29:08.252301 2026] [security2:error] [pid 6683:tid 6683] [client 155.212.36.19:28461] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/backstore/Eames-Aluminum-Management.htm"] [unique_id "au9DxGaHVTuhs-3_ual9xgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 14:22:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:22:03.798442 2026] [security2:error] [pid 31652:tid 31652] [client 155.212.36.19:15353] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.36.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:22:03.798442 2026] [security2:error] [pid 31652:tid 31652] [client 155.212.36.19:15353] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dovka.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dovka.com"] [uri "/ship-blog/welcome-and-here-we-go"] [unique_id "au3ii_NDY0IjHQXPM0KHQAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 12:50:20
UTC ·
(1 week ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-11-06 10:54:34
UTC ·
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Cluster Berater de17848 (9 IPs/15 Min)
Hacking
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-06 01:32:22
UTC ·
(1 week ago)
Web App Attack
Web App Attack
2026-10-30 08:04:17
UTC ·
(2 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-25 17:27:00
UTC ·
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-10-23 04:55:22
UTC ·
(3 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
2026-10-16 00:40:11
UTC ·
(4 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-09 09:10:52
UTC ·
(1 month ago)
Brute force
Brute-Force
2026-10-08 20:16:46
UTC ·
(1 month ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
