🇩🇪
Ilop
2026-11-09 09:30:13
UTC ·
(4 hours ago)
[hp-100] 19 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-11-09 06:34:54
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:34:48.194277 2026] [security2:error] [pid 18523:tid 18523] [client 155.212.39.190:45763] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:34:48.194277 2026] [security2:error] [pid 18523:tid 18523] [client 155.212.39.190:45763] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/with-the-heat-my-only-goal-was-to-finish-with-a-smile-on-my-face-abbey-goetz-vanvalkenburg-april-16-2012/"] [unique_id "avFpiKCg5_nIebL3z2gf_wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:28:11
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:28:09.031111 2026] [security2:error] [pid 3036:tid 3036] [client 155.212.39.190:52211] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:28:09.031111 2026] [security2:error] [pid 3036:tid 3036] [client 155.212.39.190:52211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/Stressless-Chair/Stressless-Consul-Batick-Grey-Leather-Recliner-Chair.htm"] [unique_id "avEvuc7A9aoUIe-yRvB-7gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-11-08 00:30:10
UTC ·
(1 day ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-11-06 20:30:03
UTC ·
(2 days ago)
[hp-100] 95 unsolicited packets to honeypot ports 5555,9000,7547,8000 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-11-05 19:00:15
UTC ·
(3 days ago)
[hp-100] 38 unsolicited packets to honeypot ports 7547,8000 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-11-04 17:30:14
UTC ·
(4 days ago)
[hp-100] 54 unsolicited packets to honeypot ports 443,9000,8080 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-11-03 16:00:23
UTC ·
(5 days ago)
[hp-100] 19 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-11-03 09:32:38
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:32:31.580993 2026] [security2:error] [pid 4638:tid 4638] [client 155.212.39.190:63853] M ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:32:31.580993 2026] [security2:error] [pid 4638:tid 4638] [client 155.212.39.190:63853] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/wp/v2/pages/188"] [unique_id "aumqL7x6P0odTeuuEnNiogAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 17:54:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:53:59.590487 2026] [security2:error] [pid 10474:tid 10519] [client 155.212.39.190:42039] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:53:59.590487 2026] [security2:error] [pid 10474:tid 10519] [client 155.212.39.190:42039] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishrapper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishrapper.com"] [uri "/fishing-report-minnesota-June-2022.html"] [unique_id "auOIN0x8r4peFXo1hDpqdwAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 00:02:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:02:51.266093 2026] [security2:error] [pid 15067:tid 15067] [client 155.212.39.190:50553] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 20:02:51.266093 2026] [security2:error] [pid 15067:tid 15067] [client 155.212.39.190:50553] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bordwell.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bordwell.com"] [uri "/logicpuzzle/DesertIsland/"] [unique_id "auKNKwNs38fKhmXgYolZ7wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 16:43:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:43:28.439215 2026] [security2:error] [pid 23429:tid 23429] [client 155.212.39.190:59529] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 12:43:28.439215 2026] [security2:error] [pid 23429:tid 23429] [client 155.212.39.190:59529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||danharrisphotoart.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "danharrisphotoart.com"] [uri "/Dan_Harris.html"] [unique_id "auImMMV56Doa50MutsFt3AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 20:16:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 16:16:04.858640 2026] [security2:error] [pid 32762:tid 32762] [client 155.212.39.190:36415] ...
show more
(mod_security) mod_security (id:210350) triggered by 155.212.39.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 16:16:04.858640 2026] [security2:error] [pid 32762:tid 32762] [client 155.212.39.190:36415] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/papers/paper502.html"] [unique_id "auEGhIRbsWqivaOgm4wnNgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-10-10 19:46:49
UTC ·
(4 weeks ago)
Wordpress hacking attempt
Web App Attack
🇨🇿
lp
2026-09-13 00:21:38
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 155.212.39.190
2026-09-13T01:11:18+02:00 vpn Access-Reject 'timosoarabanat' station: 155.212.39.190 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 155.212.39.190
2026-09-13T01:11:18+02:00 vpn Access-Reject 'timosoarabanat' station: 155.212.39.190 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
