🇺🇸
TPI-Abuse
2026-06-25 15:00:25
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 11:00:20.514065 2026] [security2:error] [pid 3315:tid 3315] [client 183.87.99.9:52381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||socialstudiesforkids.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/articles/currentevents/pompeii-longestepigraph.htm"] [unique_id "aj1ChJx86B8G0ZEo9c3v5gAAAA0"], referer: https://socialstudiesforkids.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-25 09:20:20
(2 days ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-25 03:50:56
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 23:50:51.500745 2026] [security2:error] [pid 32611:tid 32611] [client 183.87.99.9:10145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||laecovillage.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "laecovillage.org"] [uri "/home/directions"] [unique_id "ajylm2zzyyabcgFgDn9JbgAAAAs"], referer: https://laecovillage.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-20 19:54:22
(1 week ago)
183.87.99.9 - - [20/Jun/2026:21:53:25 +0200] "GET /205-kolczyki-alkohol?q=R%C4%99kodzie%C5%82o-Nie/M ...
show more
183.87.99.9 - - [20/Jun/2026:21:53:25 +0200] "GET /205-kolczyki-alkohol?q=R%C4%99kodzie%C5%82o-Nie/Materia%C5%82+kolczyk%C3%B3w-%C5%BBywica HTTP/2.0" 444 0 "https://krafciarka.pl/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.6668.59 Safari/537.36"
183.87.99.9 - - [20/Jun/2026:21:53:55 +0200] "GET /205-kolczyki-alkohol?q=R%C4%99kodzie%C5%82o-Nie/Materia%C5%82+kolczyk%C3%B3w-%C5%BBywica HTTP/2.0" 444 0 "https://krafciarka.pl/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.6668.59 Safari/537.36"
183.87.99.9 - - [20/Jun/2026:21:53:59 +0200] "GET /205-kolczyki-alkohol?q=R%C4%99kodzie%C5%82o-Nie/Materia%C5%82+kolczyk%C3%B3w-%C5%BBywica HTTP/2.0" 444 0 "https://krafciarka.pl/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.6668.59 Safari/537.36"
183.87.99.9 - - [20/Jun/2026:21:54:00 +0200] "GET /205-kolczyki-alkohol?q=R%C4%99kodz
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 19:16:59
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 15:16:51.621862 2026] [security2:error] [pid 7501:tid 7501] [client 183.87.99.9:28926] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.justinrudd.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.justinrudd.com"] [uri "/"] [unique_id "ajBPoxunws0tZwUYvsO3SAAAABA"], referer: http://www.justinrudd.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 16:39:41
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:39:37.152421 2026] [security2:error] [pid 515:tid 515] [client 183.87.99.9:52379] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pascoyardsale.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pascoyardsale.com"] [uri "/lina.htm"] [unique_id "ajAqyQQ-0pK7Zgur1wp_fAAAAAw"], referer: http://www.lina-romay.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
netmagnet
2026-06-07 09:14:33
(2 weeks ago)
Automated HTTP request flood (1905 requests in ~10 min) to lovecpokladu.cz using spam ?backlink= que ...
show more
Automated HTTP request flood (1905 requests in ~10 min) to lovecpokladu.cz using spam ?backlink= query params; bad web bot / web app attack from Huawei Cloud HK.
show less
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 21:35:11
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 17:35:06.954627 2026] [security2:error] [pid 26780:tid 26780] [client 183.87.99.9:62602] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/2018/03/11/"] [unique_id "ah37Ct3kUjztuq2HxKBAvAAAAA0"], referer: https://modmove.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 13:44:48
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 09:44:43.239730 2026] [security2:error] [pid 13609:tid 13609] [client 183.87.99.9:45372] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||geckoturner.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "geckoturner.com"] [uri "/"] [unique_id "ah2My1OxbFTZo4IWeg8zaQAAAAM"], referer: https://geckoturner.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-28 09:05:17
(4 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
2026-05-19 01:00:14
(1 month ago)
| [Dangerous/India] Aggressive IP 183.87.99.9 (~30 hits). Type: DoS Defender- Web server 400 error c ...
show more
| [Dangerous/India] Aggressive IP 183.87.99.9 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
kosada.com
2026-05-17 23:10:10
(1 month ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-04 06:31:28
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 02:31:22.485039 2026] [security2:error] [pid 26451:tid 26451] [client 183.87.99.9:18758] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cbcfargo.com"] [uri "/site/Resources/tape_library.php"] [unique_id "afg9OviFmYGRsAoPpblh4wAAAAw"], referer: http://www.cbcfargo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-25 08:25:23
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 04:25:15.111909 2026] [security2:error] [pid 32322:tid 32322] [client 183.87.99.9:17103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.missingfilm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.missingfilm.com"] [uri "/index.phtml"] [unique_id "aex6a6OgbKLaLQrPY9fvGwAAAAo"], referer: http://www.missingfilm.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-20 13:34:33
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 09:34:26.213840 2026] [security2:error] [pid 819545:tid 819580] [client 183.87.99.9:10217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||alexlogic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexlogic.com"] [uri "/"] [unique_id "aeYrYgBJySs4cNL-UXuCEAAAAVY"], referer: http://alexlogic.com/
show less
Brute-Force
Bad Web Bot
Web App Attack