🇺🇸
TPI-Abuse
2026-11-15 03:15:46
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:15:40.599290 2026] [security2:error] [pid 31694:tid 31694] [client 162.252.54.111:64083] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 22:15:40.599290 2026] [security2:error] [pid 31694:tid 31694] [client 162.252.54.111:64083] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ruthbalser.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ruthbalser.org"] [uri "/wp-includes/css/dist/block-library/style.min.css"] [unique_id "avkj3O6TF4q8_gb_24bUVgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 01:42:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:42:39.663623 2026] [security2:error] [pid 2360:tid 2360] [client 162.252.54.111:11725] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:42:39.663623 2026] [security2:error] [pid 2360:tid 2360] [client 162.252.54.111:11725] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "ave8j4H2c8wYPMgdDSx93wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 06:33:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:32:53.253228 2026] [security2:error] [pid 9392:tid 9392] [client 162.252.54.111:34559] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:32:53.253228 2026] [security2:error] [pid 9392:tid 9392] [client 162.252.54.111:34559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/337"] [unique_id "auQ6FQyahmPNC4tuwA7fEwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:20:01
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:19:56.566414 2026] [security2:error] [pid 15523:tid 15523] [client 162.252.54.111:65183] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:19:56.566414 2026] [security2:error] [pid 15523:tid 15523] [client 162.252.54.111:65183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/kfmj.html"] [unique_id "auJm_MkEChXih80vIK64hgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-13 13:49:52
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 162.252.54.111
2026-09-13T15:01:49+02:00 vpn Access-Reject 'yujh' station: 162.252.54.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 162.252.54.111
2026-09-13T15:01:49+02:00 vpn Access-Reject 'yujh' station: 162.252.54.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 10:36:00
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-08 14:13:19
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇦
Anytech
2026-09-01 19:41:58
UTC ·
(2 months ago)
Blocked by ConnMonitor: Bad Bot
Bad Web Bot
Spoofing
🇦🇺
oncord
2026-09-01 03:38:26
UTC ·
(2 months ago)
Form spam
Web Spam
🇬🇧
oncord
2026-08-29 09:39:53
UTC ·
(2 months ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2026-08-12 01:58:17
UTC ·
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 21:58:10.663561 2026] [security2:error] [pid 852900:tid 852900] [client 162.252.54.111:1255 ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 21:58:10.663561 2026] [security2:error] [pid 852900:tid 852900] [client 162.252.54.111:12559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chandlerowen.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chandlerowen.com"] [uri "/"] [unique_id "anvTMqX7ltEa5juzGVnfPgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-06-25 02:53:49
UTC ·
(4 months ago)
Web vulnerability probing: /wp-content/plugins/adminer.php
Web App Attack
2026-06-13 18:28:34
UTC ·
(5 months ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇸🇬
anotherwatcher
2026-06-10 11:20:09
UTC ·
(5 months ago)
bad bot
Bad Web Bot
