🇺🇸
TPI-Abuse
2026-11-15 05:43:36
UTC ·
(8 minutes ago)
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:43:27.632623 2026] [security2:error] [pid 25976:tid 25976] [client 162.252.52.106:37439] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:43:27.632623 2026] [security2:error] [pid 25976:tid 25976] [client 162.252.52.106:37439] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/waz-essen-bekanntschaftsanzeigen/"] [unique_id "avlGf9xU_m16A1Q5i89kUwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:04:36
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:04:29.109936 2026] [security2:error] [pid 18184:tid 18184] [client 162.252.52.106:29929] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:04:29.109936 2026] [security2:error] [pid 18184:tid 18184] [client 162.252.52.106:29929] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.explorediablo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.explorediablo.com"] [uri "/2015-06.html"] [unique_id "avRn3RLtaq4Nq2w4XTjihwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 20:29:54
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:29:49.883162 2026] [security2:error] [pid 29823:tid 29823] [client 162.252.52.106:15327] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:29:49.883162 2026] [security2:error] [pid 29823:tid 29823] [client 162.252.52.106:15327] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2017/07/12/july-12-2017-arsenal-for-democracy-ep-188/"] [unique_id "avDbvbOGF4dBdEFP63xdZAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:06:23
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:06:16.994844 2026] [security2:error] [pid 32459:tid 32459] [client 162.252.52.106:32459] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:06:16.994844 2026] [security2:error] [pid 32459:tid 32459] [client 162.252.52.106:32459] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||epetsure.co|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "epetsure.co"] [uri "/faq/"] [unique_id "avCd-LsdGhSJ9u2XK6pCDQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
Jova
2026-10-24 07:34:37
UTC ·
(3 weeks ago)
Web server path scanning: 15 nonexistent paths requested within a minute.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 12:53:57
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:53:50.920463 2026] [security2:error] [pid 932:tid 932] [client 162.252.52.106:14287] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.52.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 08:53:50.920463 2026] [security2:error] [pid 932:tid 932] [client 162.252.52.106:14287] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.starfrontiers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.starfrontiers.com"] [uri "/Rules/Epsilon/RoboGen.htm"] [unique_id "atDM3hcVe9r_GQRhTMKIdQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-25 11:22:52
UTC ·
(1 month ago)
2026-09-25T13:22:51.909395+02:00 polaris wp(sahpa.co.za)[2256173]: Blocked authentication attempt for
[email protected] from 162.252.52.106
...
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
NxtGenIT
2026-09-11 14:03:09
UTC ·
(2 months ago)
CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,
Brute-Force
🇬🇧
sandra361
2026-08-24 21:07:31
UTC ·
(2 months ago)
Port scan detected: 7 attempts across 1 port (4444). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=162.252.52.106 LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=8618 DF PROTO=TCP SPT=31129 DPT=4444 WINDOW=42340 RES=0x00 SYN URGP=0
Port Scan
🇨🇿
ptlab
2026-08-02 22:45:42
UTC ·
(3 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇨🇭
backslash
2026-08-01 04:18:00
UTC ·
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-07-14 05:44:47
UTC ·
(4 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
🇺🇸
mw
2026-07-02 09:11:41
UTC ·
(4 months ago)
VPN bruteforce
Brute-Force
2026-06-27 06:21:21
UTC ·
(4 months ago)
This IP was involved in an brute force and password spray attack on 2026/06/27 01:19:54
Port Scan
Brute-Force
Exploited Host
Web App Attack
