Total reports
2 from
1 distinct
reporter
First reported
February 13th 2025
Most recent report
2 days ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
1
Most common categories
Web App Attack
1
Bad Web Bot
1
Brute-Force
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-06 19:38:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 163.123.220.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:38:17.368968 2026] [security2:error] [pid 2778:tid 2778] [client 163.123.220.20:21837] M ...
show more
(mod_security) mod_security (id:210350) triggered by 163.123.220.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:38:17.368968 2026] [security2:error] [pid 2778:tid 2778] [client 163.123.220.20:21837] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wagsgrooming.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wagsgrooming.com"] [uri "/"] [unique_id "au4sqaZUvco4DFj6gtumNgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-13 14:31:34
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 163.123.220.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 09:31:29.405291 2025] [security2:error] [pid 2408484:tid 2408484] [client 163.123.220.20:35 ...
show more
(mod_security) mod_security (id:210350) triggered by 163.123.220.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 09:31:29.405291 2025] [security2:error] [pid 2408484:tid 2408484] [client 163.123.220.20:35939] [client 163.123.220.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cyberdana.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cyberdana.com"] [uri "/"] [unique_id "Z64CQf9KfOVsXJHyPumQJwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
