🇺🇸
TPI-Abuse
2026-11-15 17:36:47
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:36:38.484957 2026] [security2:error] [pid 27142:tid 27142] [client 155.212.108.53:31293] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:36:38.484957 2026] [security2:error] [pid 27142:tid 27142] [client 155.212.108.53:31293] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tomdaughertyorchestra.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tomdaughertyorchestra.com"] [uri "/aafglennmiller.html"] [unique_id "avntpkag7tLMC4U-amy9ZAAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 08:08:30
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 03:08:25.990553 2026] [security2:error] [pid 21099:tid 21099] [client 155.212.108.53:44583] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 03:08:25.990553 2026] [security2:error] [pid 21099:tid 21099] [client 155.212.108.53:44583] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/chest/simplify-bench-press.html"] [unique_id "avloeZtlc7aDxEOsp903RQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-15 07:17:41
UTC ·
(15 hours ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-14 04:13:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:13:01.946300 2026] [security2:error] [pid 24393:tid 24393] [client 155.212.108.53:45853] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:13:01.946300 2026] [security2:error] [pid 24393:tid 24393] [client 155.212.108.53:45853] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.borzoi-pedigree.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.borzoi-pedigree.info"] [uri "/recstore/p/PostrelOValleyFarmr.html"] [unique_id "avffzSP64QsFsmkO2H2VdQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:23:43
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:23:39.284464 2026] [security2:error] [pid 18633:tid 18633] [client 155.212.108.53:48421] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:23:39.284464 2026] [security2:error] [pid 18633:tid 18633] [client 155.212.108.53:48421] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.directoryofcats.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.directoryofcats.com"] [uri "/florida_panther.htm"] [unique_id "avSyq0Vk-VkEKz2HFAlkeQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:05:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:05:01.082285 2026] [security2:error] [pid 26595:tid 26595] [client 155.212.108.53:22921] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:05:01.082285 2026] [security2:error] [pid 26595:tid 26595] [client 155.212.108.53:22921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2012/05/ali-larter-bikini-pictures/"] [unique_id "au-gjWCULAc_Oo2m76_7gwAAAFk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 04:26:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:26:29.798318 2026] [security2:error] [pid 23153:tid 23153] [client 155.212.108.53:25663] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:26:29.798318 2026] [security2:error] [pid 23153:tid 23153] [client 155.212.108.53:25663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/dr-congo/"] [unique_id "auqz9ZXA19EapLtzCLw-wgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:25:13
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:25:06.737324 2026] [security2:error] [pid 7243:tid 7243] [client 155.212.108.53:53233] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.108.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:25:06.737324 2026] [security2:error] [pid 7243:tid 7243] [client 155.212.108.53:53233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.testrong.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.testrong.com"] [uri "/forum3/index.php"] [unique_id "atDUMtgXHaRDvo9mzOst9gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-23 08:06:56
UTC ·
(1 month ago)
[ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 155.212.108.53 - - [23/Sep/2026:10:06:06 +0200] "POST /xmlrpc.php HTTP/2.0" 403 87 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ...
show more
[ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 155.212.108.53 - - [23/Sep/2026:10:06:06 +0200] "POST /xmlrpc.php HTTP/2.0" 403 87 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
155.212.108.53 - - [23/Sep/2026:10:06:20 +0200] "POST /wp-login.php HTTP/2.0" 200 4487 "https://www.nieuwsvoordietisten.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
155.212.108.53 - - [23/Sep/2026:10:06:22 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
155.212.108.53 - - [23/Sep/2026:10:06:35 +0200] "POST /wp-login.
...
show less
Brute-Force
Web App Attack
🇫🇮
bittiguru.fi
2026-09-20 02:26:15
UTC ·
(1 month ago)
155.212.108.53 - [20/Sep/2026:05:25:27 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "4.66"
155.212.108.53 - [20/Sep/2026:05:26 ...
show more
155.212.108.53 - [20/Sep/2026:05:25:27 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "4.66"
155.212.108.53 - [20/Sep/2026:05:26:15 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "4.66"
...
show less
Hacking
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2026-06-25 18:50:04
UTC ·
(4 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
🇬🇧
cg-design.co.uk
2026-05-21 00:39:12
UTC ·
(5 months ago)
155.212.108.53 (ES/Spain/-), 10 distributed imapd attacks on account [redacted]
Brute-Force
🇩🇪
Paul Smith
2026-05-19 13:48:24
UTC ·
(5 months ago)
Email Auth Brute force attack 1/1 in last day
Brute-Force
2026-05-08 08:27:57
UTC ·
(6 months ago)
IM360 WAF: SQL Injection via WordPress Link functionality MV:20AND/**/5896=CAST('~'
SQL Injection
