🇺🇸
Zandro
2026-11-15 12:00:14
UTC ·
(2 hours ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-15 11:42:54
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:42:49.028054 2026] [security2:error] [pid 4135:tid 4135] [client 194.99.27.150:48717] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:42:49.028054 2026] [security2:error] [pid 4135:tid 4135] [client 194.99.27.150:48717] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||blog.mindrelaxation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blog.mindrelaxation.com"] [uri "/the-healing-wonders-of-sound/"] [unique_id "avmaualY3iTCxv1MtBwtsgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 10:24:31
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:24:26.927758 2026] [security2:error] [pid 8284:tid 8301] [client 194.99.27.150:52925] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:24:26.927758 2026] [security2:error] [pid 8284:tid 8301] [client 194.99.27.150:52925] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/vgayla2182023"] [unique_id "avmIWn03uU-BRNV3Vf908gAAAY4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 08:03:38
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:03:30.443241 2026] [security2:error] [pid 10751:tid 10751] [client 194.99.27.150:42771] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:03:30.443241 2026] [security2:error] [pid 10751:tid 10751] [client 194.99.27.150:42771] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.sarahpeebles.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sarahpeebles.net"] [uri "/smash.htm"] [unique_id "avgV0tzdbSUsS6hGoml4jQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 21:43:46
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:43:39.975857 2026] [security2:error] [pid 31426:tid 31575] [client 194.99.27.150:42995] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:43:39.975857 2026] [security2:error] [pid 31426:tid 31575] [client 194.99.27.150:42995] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howardhallis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howardhallis.com"] [uri "/doctorstrange/foreign/files/res"] [unique_id "avThi9RPPKCswz1bNLh7NAAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-11 18:20:56
UTC ·
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 194.99.27.150 (US/United States/-): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 17:44:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:44:10.271276 2026] [security2:error] [pid 31535:tid 31549] [client 194.99.27.150:18429] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 12:44:10.271276 2026] [security2:error] [pid 31535:tid 31549] [client 194.99.27.150:18429] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.woadwellness.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.woadwellness.com"] [uri "/physiology of addiction 2.html"] [unique_id "auzAandH6Jx-AC4TMw2wNQAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 00:08:09
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:08:05.326452 2026] [security2:error] [pid 13355:tid 13355] [client 194.99.27.150:45949] M ...
show more
(mod_security) mod_security (id:210350) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:08:05.326452 2026] [security2:error] [pid 13355:tid 13355] [client 194.99.27.150:45949] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/united-states/page/16/"] [unique_id "atqlZdbJbar-3VNvryNCCwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-02 13:15:18
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇨🇭
backslash
2026-08-28 15:03:18
UTC ·
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
abdubhai
2026-07-14 04:11:42
UTC ·
(4 months ago)
194.99.27.150 - - [14/Jul/2026:0
...
Brute-Force
🇪🇸
librebit
2026-06-30 18:12:22
UTC ·
(4 months ago)
Brute force
Brute-Force
🇩🇪
FeG Deutschland
2026-06-11 15:55:00
UTC ·
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
oralunal
2026-05-19 18:49:30
UTC ·
(5 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-14 12:45:25
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 08:45:18.382517 2026] [security2:error] [pid 1615781:tid 1615794] [client 194.99.27.150:2343 ...
show more
(mod_security) mod_security (id:225170) triggered by 194.99.27.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 08:45:18.382517 2026] [security2:error] [pid 1615781:tid 1615794] [client 194.99.27.150:23437] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pixelpushersdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixelpushersdesign.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad423k9WMC8yt30iHS4itwAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
