🇺🇸
TPI-Abuse
2026-11-07 23:43:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:43:22.880826 2026] [security2:error] [pid 17031: ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:43:22.880826 2026] [security2:error] [pid 17031:tid 17031] [client 206.84.80.16:55583] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||slimlaw.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "slimlaw.com"] [uri "/"] [unique_id "au-3mlxnObSlWp-eiajnqgAAAAM"], referer: https://phyberenlimbgf.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-06 11:15:48
UTC ·
(1 month ago)
Shop search flood (L7 DDoS) | path: /30-meilleur-velo-entre-2000-et-3000-euros | query: q=Taille-M-XXL/Ann%C3%A9e-2026/Mat%C3%A9riau-Carbone | src_port: 54866
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 08:06:32
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 04:06:28.643455 2026] [security2:error] [pid 20249: ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 04:06:28.643455 2026] [security2:error] [pid 20249:tid 20249] [client 206.84.80.16:55242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||visage-nico.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "visage-nico.com"] [uri "/"] [unique_id "asIJBOGNLedo3njze66odAAAABM"], referer: https://freebacklinksubmissiontool.store/dir/outreach-link-building-226759
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 10:31:41
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 06:31:36.767888 2026] [security2:error] [pid 8793:t ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 06:31:36.767888 2026] [security2:error] [pid 8793:tid 8793] [client 206.84.80.16:37404] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jbrodriguez.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jbrodriguez.com"] [uri "/"] [unique_id "asDZiMeqO5uZNysRCkJxMwAAABM"], referer: https://backlinkmonitoring.site/dir/seo-backlink-services-105501
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 07:28:39
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:28:31.803422 2026] [security2:error] [pid 10433: ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:28:31.803422 2026] [security2:error] [pid 10433:tid 10433] [client 206.84.80.16:44054] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rwcartoons.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rwcartoons.com"] [uri "/"] [unique_id "ar9dHxo44sZ5ADceEB3bNgAAAAE"], referer: https://qualitybacklinkgenerator.online/dir/website-growth-backlinks-180275
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-26 15:07:53
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-25 16:28:52
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 12:28:47.494344 2026] [security2:error] [pid 2821:t ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 12:28:47.494344 2026] [security2:error] [pid 2821:tid 2821] [client 206.84.80.16:44954] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jasbemarketing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jasbemarketing.com"] [uri "/"] [unique_id "arahPzMTYpthznCi835OAQAAABE"], referer: https://backlinkscountchecker.shop/dir/professional-seo-links-105130
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-24 09:07:25
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-24 06:12:08
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-20 16:55:54
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:55:50.733466 2026] [security2:error] [pid 3772:t ...
show more
(mod_security) mod_security (id:210350) triggered by 206.84.80.16 (Dinamic-Somos-206-84-80-16.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:55:50.733466 2026] [security2:error] [pid 3772:tid 3772] [client 206.84.80.16:32796] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||batfry.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "batfry.com"] [uri "/"] [unique_id "arAQFoKIrOfVyvRDxmlvugAAABc"], referer: https://freeblogseochecker.website/dir/powerful-seo-backlinks-19503
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-20 03:31:24
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
kosada.com
2026-08-04 11:28:36
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇨🇭
backslash
2026-07-14 05:21:12
UTC ·
(3 months ago)
block ruleset A5EE6C8F745F0934168261886A3817E5C386412A
Bad Web Bot
🇺🇸
stechusa
2026-07-02 14:00:05
UTC ·
(4 months ago)
[Askari] | country=CO | Behavior: Targeting specific pages, HTTP/1.1 over TLS, Concurrent page load during attack
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-07-02 14:00:03
UTC ·
(4 months ago)
ELEVATED_THREAT | country=CO | ASN=SOMOS NETWORKS COLOMBIA S.A.S. BIC | 833 IPs targeting /category/light-bulbs.html | Facet request during elevated threat (facet_ratio=0.79, unique_ips=1623) | HTTP/1.1 over TLS (elevated=True)
Bad Web Bot
DDoS Attack
