🇧🇪
taivas.nl
2026-09-05 20:02:15
(1 day ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-04 05:01:57
(3 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 01:01:52.150392 2026] [security2:error] [pid 8991:tid 8991] [client 43.155.125.18:49127] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.perthdps.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.perthdps.com"] [uri "/convicts/auscon.gif"] [unique_id "appQwEAvAhuhQb-LT6LWDwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 23:02:30
(3 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:02:24.645748 2026] [security2:error] [pid 2554:tid 2554] [client 43.155.125.18:42981] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||thewanderinghermit.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "thewanderinghermit.com"] [uri "/images/hermit.jpg"] [unique_id "apn8gBYxIqyxAHP5S2FMtAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SX Communications
2026-09-03 19:28:17
(3 days ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.155.125.18: traffic from this ad ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.155.125.18: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-09-03 10:06:01
(4 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 06:05:55.266852 2026] [security2:error] [pid 12821:tid 12821] [client 43.155.125.18:56223] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||passwordresearch.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "passwordresearch.com"] [uri "/images/prlogo.jpg"] [unique_id "aplGg1VzYASzm1c7SfpOFAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SX Communications
2026-09-02 21:42:29
(4 days ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.155.125.18: traffic from this ad ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 43.155.125.18: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-09-02 16:38:14
(4 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 12:38:05.223548 2026] [security2:error] [pid 20296:tid 20296] [client 43.155.125.18:38372] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.sarahpeebles.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sarahpeebles.net"] [uri "/images/pearson10_sm.jpg"] [unique_id "aphQ7WLcKZAyC5XKAW845wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 14:58:07
(4 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 10:58:02.294403 2026] [security2:error] [pid 10536:tid 10536] [client 43.155.125.18:44651] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||circleway.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "circleway.org"] [uri "/images/page_head.jpg"] [unique_id "apg5elwAwtsR0lkcsdIblwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 06:28:13
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:28:08.297321 2026] [security2:error] [pid 1042500:tid 1042589] [client 43.155.125.18:33493] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.super-8mm.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.super-8mm.com"] [uri "/img/navig1516_10.gif"] [unique_id "apfB-Aq9yP_2usCeErtknwAAAhc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:06:36
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:06:28.778485 2026] [security2:error] [pid 19639:tid 19639] [client 43.155.125.18:57897] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.lumentravel.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lumentravel.com"] [uri "/wp-content/themes/travel-agency-pro/images/patterns/pattern5.png"] [unique_id "apeu1JBZxkg4mySD_atO7QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 02:02:42
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:02:34.889469 2026] [security2:error] [pid 3180:tid 3180] [client 43.155.125.18:33475] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||acmax.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "acmax.com"] [uri "/home/templates/acmax/images/searchButton.gif"] [unique_id "apeDumk_ZxywNxMHZV1kLQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 01:38:11
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 21:38:04.444717 2026] [security2:error] [pid 23415:tid 23415] [client 43.155.125.18:44617] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||hanlontown.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "hanlontown.org"] [uri "/images/masthead.gif"] [unique_id "apd9_Fl6y0S9qxf2ExNkXQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 01:11:17
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 21:11:09.784233 2026] [security2:error] [pid 25294:tid 25294] [client 43.155.125.18:53946] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||enriquejezik.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "enriquejezik.com"] [uri "/wp-content/uploads/2025/01/a-7b286fc7-8765-4905-bcc9-19601c86195c-768x576.jpeg"] [unique_id "apd3rWHNQiUTsTLqJQErQgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 20:51:19
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:51:13.476690 2026] [security2:error] [pid 2934:tid 2934] [client 43.155.125.18:33175] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||kameleonquilt.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "kameleonquilt.com"] [uri "/bilder/norsk flagg2.gif"] [unique_id "apc6wSwc_BF7pApIgVjiwgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 20:03:58
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 43.155.125.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:03:50.374711 2026] [security2:error] [pid 24073:tid 24073] [client 43.155.125.18:60389] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.antoniocobo.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.antoniocobo.com"] [uri "/files/gimgs/80_La bola Negra00.jpg"] [unique_id "apcvpsJMhdQGEdbpn3SvSwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
