🇪🇸
librebit
2026-11-14 00:47:49
UTC ·
(21 hours ago)
Brute force
Brute-Force
🇺🇸
Zandro
2026-11-12 12:00:14
UTC ·
(2 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-11 14:23:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:23:14.078444 2026] [security2:error] [pid 31798:tid 31798] [client 155.212.37.98:43515] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:23:14.078444 2026] [security2:error] [pid 31798:tid 31798] [client 155.212.37.98:43515] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/news/building-the-world-of-wicked-the-brand-new-behind-the-scenes-featurette/"] [unique_id "avR6Uh8UVAJ_YtlxBIQDyQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:04:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:04:46.898934 2026] [security2:error] [pid 18741:tid 18741] [client 155.212.37.98:57195] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:04:46.898934 2026] [security2:error] [pid 18741:tid 18741] [client 155.212.37.98:57195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bonefrog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bonefrog.com"] [uri "/bonefrog-services/articles/good-type.html"] [unique_id "auxiznKSXjhno3Gw2WTdLwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
inspectorgdgt
2026-11-05 03:52:51
UTC ·
(1 week ago)
Unauthorized SSL-VPN authentication failures observed.
Brute-Force
🇺🇸
TPI-Abuse
2026-11-04 18:13:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 13:12:53.719429 2026] [security2:error] [pid 18177:tid 18177] [client 155.212.37.98:41805] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 13:12:53.719429 2026] [security2:error] [pid 18177:tid 18177] [client 155.212.37.98:41805] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/hungary/page/2/"] [unique_id "aut1pZotbRPZQ1RAV9hU9wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:53:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:53:20.409449 2026] [security2:error] [pid 16172:tid 16172] [client 155.212.37.98:52817] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:53:20.409449 2026] [security2:error] [pid 16172:tid 16172] [client 155.212.37.98:52817] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rcjlawfirm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rcjlawfirm.com"] [uri "/texas-and-taxes-law-blog/archives/06-2025"] [unique_id "aumS8IsiY1Ut406Mahm4xQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-03 02:29:25
UTC ·
(1 week ago)
Brute force
Brute-Force
🇩🇪
rh24
2026-10-31 11:29:57
UTC ·
(2 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 155.212.37.98 (NL/The Netherlands/-)
Bad Web Bot
🇺🇸
donarev419
2026-10-30 05:27:05
UTC ·
(2 weeks ago)
Connection to port 8080 with data transfer.
Data preview: GET /manager/html HTTP/1.1
Host: 67.215.244.172:8080
User-Agent: Python/3.11 aiohttp/3.14.5
Accep
Port Scan
Hacking
🇨🇭
Origon
2026-10-28 01:34:25
UTC ·
(2 weeks ago)
http-bad-user-agent - IP: 155.212.37.98 - time="2026-10-28T02:34:24+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 155.212.37.98 (NL/43444) : 4h ban on Ip 155.212.37.98" mod ...
show more
http-bad-user-agent - IP: 155.212.37.98 - time="2026-10-28T02:34:24+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 155.212.37.98 (NL/43444) : 4h ban on Ip 155.212.37.98" module=db
show less
Bad Web Bot
🇳🇱
WeCloudit-Anti-Abuse
2026-10-26 01:53:30
UTC ·
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-10-25 23:11:57
UTC ·
(2 weeks ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-23 13:55:23
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:55:20.097101 2026] [security2:error] [pid 11682:tid 11682] [client 155.212.37.98:26685] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.37.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 09:55:20.097101 2026] [security2:error] [pid 11682:tid 11682] [client 155.212.37.98:26685] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.zenmonkeyproject.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.zenmonkeyproject.com"] [uri "/history/"] [unique_id "attnSBAuEL5iCGd9NXQTkwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-10-13 11:50:55
UTC ·
(1 month ago)
http-bad-user-agent - IP: 155.212.37.98 - time="2026-10-13T13:50:54+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 155.212.37.98 (NL/43444) : 4h ban on Ip 155.212.37.98" mod ...
show more
http-bad-user-agent - IP: 155.212.37.98 - time="2026-10-13T13:50:54+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 155.212.37.98 (NL/43444) : 4h ban on Ip 155.212.37.98" module=db
show less
Bad Web Bot
