🇺🇸
TPI-Abuse
2026-06-12 08:36:48
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:36:40.795558 2026] [security2:error] [pid 8165:tid 8378] [client 183.87.97.72:37362] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||esgcommission.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "esgcommission.org"] [uri "/403.shtml"] [unique_id "aivFGIMhLxxHWsBMeGqV9wAAAk8"], referer: http://esgcommission.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
netmagnet
2026-06-07 09:14:33
(1 week ago)
Automated HTTP request flood (1770 requests in ~10 min) to lovecpokladu.cz using spam ?backlink= que ...
show more
Automated HTTP request flood (1770 requests in ~10 min) to lovecpokladu.cz using spam ?backlink= query params; bad web bot / web app attack from Huawei Cloud HK.
show less
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 09:31:57
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 05:31:53.311180 2026] [security2:error] [pid 13095:tid 13095] [client 183.87.97.72:42144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||coyotepoet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "coyotepoet.com"] [uri "/"] [unique_id "ahquicTQbZRMFGWF3eRA3wAAAAo"], referer: https://coyotepoet.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 14:36:59
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 10:36:53.314419 2026] [security2:error] [pid 7611:tid 7638] [client 183.87.97.72:52444] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dulemba.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dulemba.com"] [uri "/"] [unique_id "ahmkhWfWA0UBdBEH8ibl5gAAAZg"], referer: http://dulemba.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-28 10:36:57
(2 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
2026-05-19 15:20:03
(4 weeks ago)
| [Dangerous/India] Aggressive IP 183.87.97.72 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/India] Aggressive IP 183.87.97.72 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
kosada.com
2026-05-17 22:45:52
(4 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-05 21:57:08
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 17:57:03.413996 2026] [security2:error] [pid 20930:tid 20930] [client 183.87.97.72:59051] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.srossi.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.srossi.net"] [uri "/2006/12/XMAS2006/pages/XMAS2006 (51)_jpg.htm"] [unique_id "afpnrz-JDxNfyjimUsEVOAAAABE"], referer: http://www.srossi.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-02 18:13:14
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 02 14:13:08.429749 2026] [security2:error] [pid 1376:tid 1376] [client 183.87.97.72:45568] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.trancelucid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.trancelucid.com"] [uri "/index.phtml"] [unique_id "afY-tA0AlhQxG7Aq5D9rmgAAABI"], referer: http://www.trancelucid.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 22:16:12
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.97.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 18:16:06.505979 2026] [security2:error] [pid 3123722:tid 3123722] [client 183.87.97.72:16847] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oualierealty.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oualierealty.com"] [uri "/403.shtml"] [unique_id "aeAOJmtE7j_C_2myb29c8AAAAAE"], referer: http://www.oualierealty.com/
show less
Brute-Force
Bad Web Bot
Web App Attack