Total reports
5 from
2 distinct
reporters
First reported
May 28th 2026
Most recent report
1 hour ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
Most common categories
Brute-Force
4
Web App Attack
4
Bad Web Bot
4
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-11 05:47:30
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:47:25.056762 2026] [security2:error] [pid 21481:tid 21481] [client 162.252.53.108:23831] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:47:25.056762 2026] [security2:error] [pid 21481:tid 21481] [client 162.252.53.108:23831] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fashionmenswear.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fashionmenswear.com"] [uri "/store/skin/frontend/default/fsbmensRD/css/adjusts.css"] [unique_id "avQBbbTS-d9fAd7ROmDRRQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 16:34:27
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 12:34:19.662062 2026] [security2:error] [pid 19704:tid 19704] [client 162.252.53.108:30683] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 12:34:19.662062 2026] [security2:error] [pid 19704:tid 19704] [client 162.252.53.108:30683] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||stoneageartifacts.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "stoneageartifacts.com"] [uri "/html/Artifact-Denmark.html"] [unique_id "auTHC0-pbmgpUOfbjfi5MQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:25:14
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:25:06.222062 2026] [security2:error] [pid 8029:tid 8029] [client 162.252.53.108:44287] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:25:06.222062 2026] [security2:error] [pid 8029:tid 8029] [client 162.252.53.108:44287] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.steveyett.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.steveyett.com"] [uri "/remodel 5.htm"] [unique_id "auFA4lrAv25s429vo9QzhwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 17:04:39
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:04:36.043473 2026] [security2:error] [pid 10883:tid 10883] [client 162.252.53.108:45721] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:04:36.043473 2026] [security2:error] [pid 10883:tid 10883] [client 162.252.53.108:45721] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/maamarim/drugie/09/Izkov.html"] [unique_id "at-IJLAlK1WpAB2Rpvds6gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-28 02:49:20
UTC ·
(5 months ago)
FP Score: 5 (Rule triggered: Headless Chrome detected; Automation tool detected: Headless Chrome; Automation tool detected: Headless Chrome with standard UA pattern; Suspicious ASN: 'PureVoltage Hosting Inc.'; Invalid rDNS on hosting network; navigat ...
show more
FP Score: 5 (Rule triggered: Headless Chrome detected; Automation tool detected: Headless Chrome; Automation tool detected: Headless Chrome with standard UA pattern; Suspicious ASN: 'PureVoltage Hosting Inc.'; Invalid rDNS on hosting network; navigator.webdriver=true (automation); WebGL Software Renderer detected: ANGLE (Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver); UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/147.0.7727.15 Safari/537.36)
show less
Bad Web Bot
