2026-11-15 04:25:31
UTC ·
(44 minutes ago)
WEB attack
Brute-Force
🇺🇸
Zandro
2026-11-12 12:00:14
UTC ·
(2 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-09 05:03:03
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:02:58.369051 2026] [security2:error] [pid 12531:tid 12531] [client 162.252.53.73:65301] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:02:58.369051 2026] [security2:error] [pid 12531:tid 12531] [client 162.252.53.73:65301] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/vip-club-gladbeck/"] [unique_id "avFUAo69HDLif3XEPazB_gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:26:14
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:26:11.934621 2026] [security2:error] [pid 20229:tid 20229] [client 162.252.53.73:45007] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:26:11.934621 2026] [security2:error] [pid 20229:tid 20229] [client 162.252.53.73:45007] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dannyvanryswyk.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dannyvanryswyk.com"] [uri "/close-to-madness.html"] [unique_id "avETI2Nj_ls4lMH8hhrICQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 01:31:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:30:58.634595 2026] [security2:error] [pid 3968:tid 3968] [client 162.252.53.73:29655] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:30:58.634595 2026] [security2:error] [pid 3968:tid 3968] [client 162.252.53.73:29655] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.blacksheepoffroad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.blacksheepoffroad.com"] [uri "/the-trail/"] [unique_id "auvcUqVaLbEDUwEPUVZhpAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:58:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:58:14.525595 2026] [security2:error] [pid 18436:tid 18436] [client 162.252.53.73:28765] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:58:14.525595 2026] [security2:error] [pid 18436:tid 18436] [client 162.252.53.73:28765] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bikiniadvice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bikiniadvice.com"] [uri "/puckered-stitching-adds-backside-definition/173"] [unique_id "aulNxkGo1tnxwmElAjWLfgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 10:38:31
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:38:26.312092 2026] [security2:error] [pid 27967:tid 27967] [client 162.252.53.73:12503] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:38:26.312092 2026] [security2:error] [pid 27967:tid 27967] [client 162.252.53.73:12503] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mikekornrich.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mikekornrich.com"] [uri "/"] [unique_id "auRzok_a-b-URzzUSQ_tmQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 13:56:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:56:47.953147 2026] [security2:error] [pid 4197:tid 4197] [client 162.252.53.73:62649] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:56:47.953147 2026] [security2:error] [pid 4197:tid 4197] [client 162.252.53.73:62649] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ruthbalser.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ruthbalser.org"] [uri "/news/page/2/"] [unique_id "auNQn2gmytjJukM0GyzdIQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 21:07:47
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:07:40.387909 2026] [security2:error] [pid 24589:tid 24589] [client 162.252.53.73:20535] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:07:40.387909 2026] [security2:error] [pid 24589:tid 24589] [client 162.252.53.73:20535] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bayoutown.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bayoutown.com"] [uri "/btwatershed.html"] [unique_id "auESnOfqg2at030z8hHujgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:02:56
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:02:52.326261 2026] [security2:error] [pid 27908:tid 27908] [client 162.252.53.73:33599] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:02:52.326261 2026] [security2:error] [pid 27908:tid 27908] [client 162.252.53.73:33599] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||champions-in-arms.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "champions-in-arms.com"] [uri "/lostrealmers/exploits.html"] [unique_id "atv1rOq48py4EcxmVw2pVAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-08-28 12:05:02
UTC ·
(2 months ago)
2026/08/28 12:02:31 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇫🇮
JimArchon72
2026-08-21 18:20:02
UTC ·
(2 months ago)
2026/08/21 18:17:56 "GET /wp-login.php?action=register HTTP/1.1"
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 05:27:39
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 01:27:32.136564 2026] [security2:error] [pid 32430:tid 32430] [client 162.252.53.73:65003] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 01:27:32.136564 2026] [security2:error] [pid 32430:tid 32430] [client 162.252.53.73:65003] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||donaldcoleman.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "donaldcoleman.com"] [uri "/"] [unique_id "an_4xOjL_SZoAkI0peCJBgAAAAY"], referer: https://www.facebook.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
securejdprop
2026-04-16 18:33:54
UTC ·
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing
Hacking
Web App Attack
