🇺🇸
TPI-Abuse
2026-11-13 03:46:34
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.111.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:46:29.507674 2026] [security2:error] [pid 21134:tid 21134] [client 155.212.111.60:17789] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.111.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 22:46:29.507674 2026] [security2:error] [pid 21134:tid 21134] [client 155.212.111.60:17789] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||villamarehiltonhead.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "villamarehiltonhead.com"] [uri "/tennis.htm"] [unique_id "avaIFcyhV_h9ihMvFDji2QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-09 11:41:57
UTC ·
(3 days ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-09 06:55:52
UTC ·
(4 days ago)
RDWeb scan
Web App Attack
2026-10-31 11:35:32
UTC ·
(1 week ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-29 03:46:54
UTC ·
(2 weeks ago)
RDWeb scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 15:54:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.111.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 11:54:09.394691 2026] [security2:error] [pid 3720:tid 3720] [client 155.212.111.60:53639] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.111.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 11:54:09.394691 2026] [security2:error] [pid 3720:tid 3720] [client 155.212.111.60:53639] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||instituteofscience.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "instituteofscience.com"] [uri "/caries.html"] [unique_id "auIaoZq7VEmdJ12fOV1CqgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tinect
2026-10-27 12:08:09
UTC ·
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-probing
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 09:39:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.111.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:39:08.966547 2026] [security2:error] [pid 23399:tid 23399] [client 155.212.111.60:36287] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.111.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:39:08.966547 2026] [security2:error] [pid 23399:tid 23399] [client 155.212.111.60:36287] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.transparentforest.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.transparentforest.com"] [uri "/blog/"] [unique_id "atx8vPbHBLjqF0K5TX7TUwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-23 09:48:56
UTC ·
(3 weeks ago)
RDWeb scan
Web App Attack
2026-10-23 06:22:09
UTC ·
(3 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-22 00:28:27
UTC ·
(3 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-17 10:13:56
UTC ·
(3 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-16 06:50:34
UTC ·
(4 weeks ago)
RDWeb scan
Web App Attack
2026-10-16 03:20:01
UTC ·
(4 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-15 05:18:16
UTC ·
(4 weeks ago)
RDWeb scan
Web App Attack
