🇺🇸
TPI-Abuse
2026-11-15 10:38:50
UTC ·
(14 minutes ago)
(mod_security) mod_security (id:210350) triggered by 216.40.72.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:38:42.724477 2026] [security2:error] [pid 11828:tid 11828] [client 216.40.72.29:45833] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.72.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:38:42.724477 2026] [security2:error] [pid 11828:tid 11828] [client 216.40.72.29:45833] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/mobiliario/armariodeseguridadpinflamablesphenix60.html"] [unique_id "avmLshiIGMmTF7Hromu96QAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-11-11 06:48:56
UTC ·
(4 days ago)
Not following 301 redirects — wasted requests | method: GET | path: /en/blog/news/10-rules-for-choosing-a-domain-name/ | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15
Bad Web Bot
🇺🇸
Zandro
2026-11-10 20:00:14
UTC ·
(4 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇳🇱
i-turnradio.nl
2026-10-25 17:29:16
UTC ·
(2 weeks ago)
2026-10-25 @ 18:29:00 (CET) ~ Blocked for trying to access: /wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 02:02:21
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 216.40.72.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:02:14.404926 2026] [security2:error] [pid 9493:tid 9493] [client 216.40.72.29:40687] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.72.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:02:14.404926 2026] [security2:error] [pid 9493:tid 9493] [client 216.40.72.29:40687] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||danafrostick.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "danafrostick.com"] [uri "/travel/newyork/index.htm"] [unique_id "at1jJvM2e59S0A0zumxARwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-09-20 13:57:09
UTC ·
(1 month ago)
[redacted] 216.40.72.29 - - [20/Sep/2026:14:57:07 +0100] "POST /[redacted] HTTP/1.1" 405 1148 0/77326 "-" "Apache-HttpClient/4.5.13 (Java/11.0.32)" 443 [redacted] 216.40.72.29 - - [20/Sep/2026:14:57:07 +0100] "GET /[redacted] HTTP/1.1" 302 1534 0/161 ...
show more
[redacted] 216.40.72.29 - - [20/Sep/2026:14:57:07 +0100] "POST /[redacted] HTTP/1.1" 405 1148 0/77326 "-" "Apache-HttpClient/4.5.13 (Java/11.0.32)" 443 [redacted] 216.40.72.29 - - [20/Sep/2026:14:57:07 +0100] "GET /[redacted] HTTP/1.1" 302 1534 0/161174 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 443
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 20:36:13
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 216.40.72.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 16:36:08.264639 2026] [security2:error] [pid 28157:tid 28157] [client 216.40.72.29:18787] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 216.40.72.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 16:36:08.264639 2026] [security2:error] [pid 28157:tid 28157] [client 216.40.72.29:18787] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aq7yOOwqx4091vZnjEXSlwAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-16 12:31:43
UTC ·
(1 month ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /wp-login.php | 2026-09-16 12:31 UTC
Hacking
Web App Attack
🇨🇭
backslash
2026-08-28 00:57:05
UTC ·
(2 months ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇺🇸
nowyouknow
2025-12-20 03:11:14
UTC ·
(10 months ago)
(From [email protected] ) Hello Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competi ...
show more
(From [email protected] ) Hello Team,
I typed your main service keywords into Google today, and I noticed something frustrating. Your website is professionally designed, but it’s buried on Page 2.
Meanwhile, 2 or 3 of your direct competitors, who frankly have weaker websites than you—are sitting at the top of Page 1.
They are effectively "stealing" leads that were looking for you. They aren't better than you; they just have better SEO signals.
I’ve already analyzed exactly what they are doing differently.
If you want to see the comparison report, just reply "Yes" and I’ll send it over.
Cheers,
QIK
show less
Phishing
Web Spam
