🇺🇸
TPI-Abuse
2026-11-13 04:27:35
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:27:27.664765 2026] [security2:error] [pid 11016:tid 11070] [client 155.212.38.13:13489] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 23:27:27.664765 2026] [security2:error] [pid 11016:tid 11070] [client 155.212.38.13:13489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.leaderoftheopposition.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.leaderoftheopposition.com"] [uri "/date/2014/08"] [unique_id "avaRr-4neCfb_zdrBvlZzwAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 06:04:16
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:04:09.679629 2026] [security2:error] [pid 13900:tid 13900] [client 155.212.38.13:38087] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:04:09.679629 2026] [security2:error] [pid 13900:tid 13900] [client 155.212.38.13:38087] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/posts/8992"] [unique_id "aul5WXo01p-YyuUFsPhWRgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 21:55:10
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:55:05.215259 2026] [security2:error] [pid 16290:tid 16290] [client 155.212.38.13:54289] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:55:05.215259 2026] [security2:error] [pid 16290:tid 16290] [client 155.212.38.13:54289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.individualhealth.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.individualhealth.com"] [uri "/dental/coronado.html"] [unique_id "auEdudmne1_5_D3EbU2jmQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-19 17:11:19
UTC ·
(3 weeks ago)
[MonOct1919:11:14.3134722026][security2:error][pid463631:tid463724][client155.212.38.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"96 ...
show more
[MonOct1919:11:14.3134722026][security2:error][pid463631:tid463724][client155.212.38.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"leonitraslochi.ch\"][uri\"/xmlrpc.php\"][unique_id\"atZPMiaA3yWrTGjY8jTKeQAAARY\"]
show less
Hacking
Web App Attack
2026-10-12 19:04:49
UTC ·
(1 month ago)
Aggressive web scan
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 20:42:30
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 20:42:30
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 01:50:10
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 155.212.38.13
2026-09-11T03:37:58+02:00 vpn Access-Reject 'livianab' station: 155.212.38.13 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 155.212.38.13
2026-09-11T03:37:58+02:00 vpn Access-Reject 'livianab' station: 155.212.38.13 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-04 15:22:08
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 11:22:04.157954 2026] [security2:error] [pid 20990:tid 21094] [client 155.212.38.13:39965] M ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 11:22:04.157954 2026] [security2:error] [pid 20990:tid 21094] [client 155.212.38.13:39965] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ceol.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ceol.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afi5nNyJVkETDDqKxzT2GQAAAdc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-04-20 22:49:08
UTC ·
(6 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-04-20 00:25:31
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 20:25:27.176481 2026] [security2:error] [pid 3722148:tid 3722148] [client 155.212.38.13:1634 ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 20:25:27.176481 2026] [security2:error] [pid 3722148:tid 3722148] [client 155.212.38.13:16341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ww-bbs.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ww-bbs.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeVydxArhqWwXP_tSqJhJgAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-04-19 23:17:15
UTC ·
(6 months ago)
Web password guessing
Brute-Force
🇺🇸
nationaleventpros.com
2026-04-18 03:21:36
UTC ·
(6 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-04-14 14:37:01
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 10:36:53.077227 2026] [security2:error] [pid 2135477:tid 2135477] [client 155.212.38.13:1843 ...
show more
(mod_security) mod_security (id:225170) triggered by 155.212.38.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 10:36:53.077227 2026] [security2:error] [pid 2135477:tid 2135477] [client 155.212.38.13:18439] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gonzalez.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gonzalez.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad5RBW2Ilz7lTbys3r0-JgAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
