2026-11-15 06:15:33
UTC ·
(7 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-14 10:33:52
UTC ·
(1 day ago)
FortiWeb WAF: 36 attacks detected. Threat Score: 12638925. Types: Client Management(18), HTTP Protocol Constraints(18). Origin: Netherlands.
Web App Attack
🇩🇪
klaus_ph
2026-11-12 10:08:27
UTC ·
(3 days ago)
[Thu Nov 12 11:08:27.018828 2026] [authz_core:error] [pid 3589665] [client 155.212.37.17:28221] AH01630: client denied by server configuration: /home/vufind.net/public_html/
...
Bad Web Bot
🇫🇷
ELYAZ
2026-11-12 01:55:22
UTC ·
(3 days ago)
(y3) Failed scan -byebye- from 155.212.37.17 (NL/The Netherlands/-): (CF_ENABLE)
Hacking
🇺🇸
TPI-Abuse
2026-10-28 22:15:19
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:15:14.350456 2026] [security2:error] [pid 32379:tid 32379] [client 155.212.37.17:60649] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:15:14.350456 2026] [security2:error] [pid 32379:tid 32379] [client 155.212.37.17:60649] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.inquisitivequincie.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.inquisitivequincie.com"] [uri "/WP/news/earth-day/"] [unique_id "auJz8q3fCINfAr1T6a9xkgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
elcruzado.es
2026-10-27 20:27:54
UTC ·
(2 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 155.212.37.17 (-)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-24 04:02:23
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 00:02:16.742150 2026] [security2:error] [pid 20455:tid 20466] [client 155.212.37.17:55985] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 00:02:16.742150 2026] [security2:error] [pid 20455:tid 20466] [client 155.212.37.17:55985] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oldcarz.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oldcarz.com"] [uri "/auto-makers-dates.htm"] [unique_id "atwtyNek9fjax0zeeBbskwAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:27:26
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:27:21.836891 2026] [security2:error] [pid 27300:tid 27319] [client 155.212.37.17:23923] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:27:21.836891 2026] [security2:error] [pid 27300:tid 27319] [client 155.212.37.17:23923] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||managementconsultantcertification.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "managementconsultantcertification.com"] [uri "/Management-Consultant-Handbook-158.html"] [unique_id "atDiyf3nOJWCLjyd36LSIwAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-14 15:35:27
UTC ·
(1 month ago)
Brute force
Brute-Force
🇨🇭
4server
2026-10-13 08:53:37
UTC ·
(1 month ago)
[TueOct1310:53:30.2504862026][security2:error][pid3919315:tid3919393][client155.212.37.17:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ...
show more
[TueOct1310:53:30.2504862026][security2:error][pid3919315:tid3919393][client155.212.37.17:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.studiokellybenessere.ch\"][uri\"/robots.txt\"][unique_id\"as3xiuRq-fJncJQmclKbzQAAAJA\"]
show less
Hacking
Web App Attack
🇨🇭
Origon
2026-09-30 06:55:52
UTC ·
(1 month ago)
http-bad-user-agent - IP: 155.212.37.17 - time="2026-09-30T08:55:52+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 155.212.37.17 (NL/43444) : 4h ban on Ip 155.212.37.17" mod ...
show more
http-bad-user-agent - IP: 155.212.37.17 - time="2026-09-30T08:55:52+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 155.212.37.17 (NL/43444) : 4h ban on Ip 155.212.37.17" module=db
show less
Bad Web Bot
🇦🇺
Bay13
2026-09-30 04:17:46
UTC ·
(1 month ago)
CrowdSec:custom/modsecurity
Web App Attack
🇨🇭
backslash
2026-09-23 04:21:00
UTC ·
(1 month ago)
block ruleset 7B8FD6B12C4E12B6F0DAE02E53C0597FBEDDF5BC
Bad Web Bot
🇪🇸
librebit
2026-08-07 01:58:26
UTC ·
(3 months ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-04-12 15:05:44
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 11:05:37.930820 2026] [security2:error] [pid 81730:tid 81730] [client 155.212.37.17:23195] M ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.37.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 11:05:37.930820 2026] [security2:error] [pid 81730:tid 81730] [client 155.212.37.17:23195] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||coloradohifi.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "coloradohifi.com"] [uri "/wp-json/wp/v2/users"] [unique_id "adu0wWm6-LW1ZD_N2YReFwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
