🇺🇸
TPI-Abuse
2026-11-07 11:04:40
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 37.99.37.228 (client.fttb.2day.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 06:04:35.133330 2026] [security2:error] [pid 386:tid 386] [client 37.99.37. ...
show more
(mod_security) mod_security (id:210350) triggered by 37.99.37.228 (client.fttb.2day.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 06:04:35.133330 2026] [security2:error] [pid 386:tid 386] [client 37.99.37.228:7573] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||beach98.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "beach98.com"] [uri "/"] [unique_id "au8Fw01tVGmip_bT9L1bwAAAAAY"], referer: https://greatwebmakers.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 20:10:18
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 37.99.37.228 (client.fttb.2day.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:10:11.634059 2026] [security2:error] [pid 11977:tid 11977] [client 37.99 ...
show more
(mod_security) mod_security (id:210350) triggered by 37.99.37.228 (client.fttb.2day.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:10:11.634059 2026] [security2:error] [pid 11977:tid 11977] [client 37.99.37.228:14700] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||helik.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "helik.com"] [uri "/"] [unique_id "aueco8MDyIw5nP28WIfzmQAAAAg"], referer: https://acquire.co.in/redirect.php?ref_host=thompsonfamilyfoundation.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-28 11:53:56
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-13 15:30:14
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-01-14 14:17:20
UTC ·
(9 months ago)
Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.93 Safari/537.36
Bad Web Bot
🇫🇷
Nicolmn
2025-03-08 08:34:14
UTC ·
(1 year ago)
Web form spam ( id prlr.l )
Web Spam
2025-03-08 06:23:14
UTC ·
(1 year ago)
WAPPICOM WEBFORM SPAM 37.99.37.228 (client.fttb.2day.kz)
Web Spam
🇫🇷
Nicolmn
2025-03-08 05:36:08
UTC ·
(1 year ago)
Web form spam ( id ccrd-mm.l )
Web Spam
2025-03-08 05:08:18
UTC ·
(1 year ago)
BIDSODE WEBFORM SPAM 37.99.37.228 (client.fttb.2day.kz)
Web Spam
🇨🇦
Webmestre
2025-03-08 04:29:00
UTC ·
(1 year ago)
Form abuse
Web Spam
Bad Web Bot
🇫🇷
Nicolmn
2025-03-08 04:05:35
UTC ·
(1 year ago)
Web form spam ( id gml.c )
Web Spam
🇫🇷
Nicolmn
2025-03-08 03:49:30
UTC ·
(1 year ago)
Web form spam ( id ltzmv-mm.l )
Web Spam
2025-03-08 03:47:43
UTC ·
(1 year ago)
OKADE WEBFORM SPAM 37.99.37.228 (client.fttb.2day.kz)
Web Spam
🇮🇹
Progetto1
2025-03-08 03:36:02
UTC ·
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-03-08 03:09:13
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 37.99.37.228 (client.fttb.2day.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 07 22:09:09.307673 2025] [security2:error] [pid 11191:tid 11213] [client 37.99 ...
show more
(mod_security) mod_security (id:210730) triggered by 37.99.37.228 (client.fttb.2day.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 07 22:09:09.307673 2025] [security2:error] [pid 11191:tid 11213] [client 37.99.37.228:2991] [client 37.99.37.228] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.adetnw.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.adetnw.com"] [uri "/www3/mailto:[email protected] "] [unique_id "Z8u01V0Ay1g8skK75wMnEwAAAJQ"], referer: https://www.adetnw.com/www3/contact.html
show less
Brute-Force
Bad Web Bot
Web App Attack
