🇩🇪
nyuuzyou
2026-11-05 12:28:42
UTC ·
(4 days ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-05T12:28:42Z.
Bad Web Bot
🇩🇪
nyuuzyou
2026-11-01 19:47:36
UTC ·
(1 week ago)
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-11-01T19:47:36Z.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-26 01:37:24
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:37:18.549229 2026] [security2:error] [pid 6681:tid 6681] [client 79.106.33.69:45244] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:37:18.549229 2026] [security2:error] [pid 6681:tid 6681] [client 79.106.33.69:45244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.crep-psych.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.crep-psych.org"] [uri "/start/"] [unique_id "at6uzm-ZXuFF6y_gylDydAAAABE"], referer: https://crep-psych.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 16:44:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:44:23.385281 2026] [security2:error] [pid 18585:tid 18585] [client 79.106.33.69:43293] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:44:23.385281 2026] [security2:error] [pid 18585:tid 18585] [client 79.106.33.69:43293] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.concentricsteel.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.concentricsteel.com"] [uri "/"] [unique_id "at4x5zbJQ6eYH8iIUWiCLQAAAAU"], referer: https://acquire.co.in/redirect.php?ref_host=mt302lz.vip
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-11 20:48:02
UTC ·
(4 weeks ago)
block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-05 20:13:38
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 16:13:31.773776 2026] [security2:error] [pid 28556:tid 28556] [client 79.106.33.69:58704] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 16:13:31.773776 2026] [security2:error] [pid 28556:tid 28556] [client 79.106.33.69:58704] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rosetina.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rosetina.com"] [uri "/"] [unique_id "asQE6yiXNlO_mTfG7PvZJwAAAAc"], referer: https://automatedlinkbuilding.online/dir/strong-domain-backlinks-178870
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-10-01 06:38:18
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-30 10:15:43
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇩🇪
ghostwarriors
2026-09-30 07:50:15
UTC ·
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-09-30 07:23:30
UTC ·
(1 month ago)
2026/09/30 09:23:30 [error] 18188#100954: *3890482 access forbidden by rule, client: 79.106.33.69, server: new.hondaforum.hu, request: "GET /topic/honda-civic/687052/ HTTP/1.1", host: "new.hondaforum.hu"
...
Web Spam
🇺🇸
TPI-Abuse
2026-09-29 14:16:42
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 10:16:39.104310 2026] [security2:error] [pid 28190:tid 28190] [client 79.106.33.69:51819] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 79.106.33.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 10:16:39.104310 2026] [security2:error] [pid 28190:tid 28190] [client 79.106.33.69:51819] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pharmaceuticalsalescertifications.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pharmaceuticalsalescertifications.com"] [uri "/should-you-get-certified/"] [unique_id "arvIR7yiEnOC7qSSxIQNlwAAAA0"], referer: https://snohomishphotobooth.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
鬼影233
2026-09-28 12:57:10
UTC ·
(1 month ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-24 12:44:07
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
鬼影233
2026-09-22 06:19:26
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
Bad Web Bot
🇺🇸
鬼影233
2026-09-21 14:48:52
UTC ·
(1 month ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
Bad Web Bot
