🇺🇸
TPI-Abuse
2026-11-14 03:15:51
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:15:43.386247 2026] [security2:error] [pid 31756:tid 31756] [client 162.252.55.19:46137] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:15:43.386247 2026] [security2:error] [pid 31756:tid 31756] [client 162.252.55.19:46137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/styled-48/index.html"] [unique_id "avfSX-9y7rxBZzctqeeX9QAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:53:36
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:53:31.474308 2026] [security2:error] [pid 16395:tid 16395] [client 162.252.55.19:23447] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:53:31.474308 2026] [security2:error] [pid 16395:tid 16395] [client 162.252.55.19:23447] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/results/2009/2009-ifbb-pittsbrugh-pro-202.html"] [unique_id "avKVOyh722twXGacQErHuwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 03:28:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:28:41.103059 2026] [security2:error] [pid 20965:tid 20965] [client 162.252.55.19:19727] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:28:41.103059 2026] [security2:error] [pid 20965:tid 20965] [client 162.252.55.19:19727] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/academic-flourishing-the-practical-idea/"] [unique_id "auv36eTWNwEH13Unx4UXigAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 04:57:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:57:19.012183 2026] [security2:error] [pid 2539058:tid 2539079] [client 162.252.55.19:3835 ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:57:19.012183 2026] [security2:error] [pid 2539058:tid 2539079] [client 162.252.55.19:38351] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.projectmanagementcertification.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.projectmanagementcertification.org"] [uri "/approvedtraining.html"] [unique_id "aulpry11Qmcn-irWWvrY7QAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 19:37:05
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:37:01.115220 2026] [security2:error] [pid 15568:tid 15568] [client 162.252.55.19:46449] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 15:37:01.115220 2026] [security2:error] [pid 15568:tid 15568] [client 162.252.55.19:46449] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.byles.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.byles.net"] [uri "/ink-review/2018-5-16-ink-review-ink-institute-cut-jade/"] [unique_id "atkUXYymOW8SiFbkNFIhdgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
threewalls.co.uk
2026-10-02 03:47:51
UTC ·
(1 month ago)
Triggered bot honeypot on thegardenrange.co.uk. Ignored nofollow and disallow directives.
Fraud Orders
FTP Brute-Force
Brute-Force
Exploited Host
🇬🇧
relianoid.com
2026-09-24 17:25:25
UTC ·
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇩🇪
HandyTreff.de
2026-08-07 23:49:58
UTC ·
(3 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -33.707 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.
Web App Attack
Bad Web Bot
2026-08-02 12:53:32
UTC ·
(3 months ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 22:12:42
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 18:12:34.591281 2026] [security2:error] [pid 822933:tid 822933] [client 162.252.55.19:64151] ...
show more
(mod_security) mod_security (id:225170) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 18:12:34.591281 2026] [security2:error] [pid 822933:tid 822933] [client 162.252.55.19:64151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nothotmail.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nothotmail.org"] [uri "/wp-json/wp/v2/users"] [unique_id "am0d0oQjs2M-Og6Dqo4c5wAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 20:03:51
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 16:03:47.090779 2026] [security2:error] [pid 1278675:tid 1278675] [client 162.252.55.19:5504 ...
show more
(mod_security) mod_security (id:225170) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 16:03:47.090779 2026] [security2:error] [pid 1278675:tid 1278675] [client 162.252.55.19:55049] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||donnysimonton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "donnysimonton.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amz_o3e3EoTtXdJzVb6BfQAAAEo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 07:51:14
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 03:51:09.509042 2026] [security2:error] [pid 2613292:tid 2613317] [client 162.252.55.19:2882 ...
show more
(mod_security) mod_security (id:225170) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 03:51:09.509042 2026] [security2:error] [pid 2613292:tid 2613317] [client 162.252.55.19:28829] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rodela.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rodela.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amxT7QyRn3jM0YuBZsHyPwAAAJY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
entangled_mongoose
2026-07-30 14:07:18
UTC ·
(3 months ago)
Probed /wp-json/wp/v2/users.
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 00:30:34
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:30:25.973429 2026] [security2:error] [pid 1844745:tid 1844745] [client 162.252.55.19:6339 ...
show more
(mod_security) mod_security (id:210730) triggered by 162.252.55.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:30:25.973429 2026] [security2:error] [pid 1844745:tid 1844745] [client 162.252.55.19:63395] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Dandridge II/Thumbs.db"] [unique_id "amFgoQqJtuvUEAv1bLZ49gAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Dandridge%20II/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-06-06 13:04:43
UTC ·
(5 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -46.88 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1608.1
Web App Attack
Bad Web Bot
