🇺🇸
TPI-Abuse
2026-11-09 10:02:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:02:00.741159 2026] [security2:error] [pid 31534:tid 31534] [client 199.96.167.180:11545] ...
show more
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:02:00.741159 2026] [security2:error] [pid 31534:tid 31534] [client 199.96.167.180:11545] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/e7db3006c018c1c4862566bd000abc75/b34cfc56189d302386256b2e004c7f49_7b4ad6db.html"] [unique_id "avGaGPt7aDPxa8zIpiMxIgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:49:47
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:49:39.607362 2026] [security2:error] [pid 1876:tid 1876] [client 199.96.167.180:51329] M ...
show more
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:49:39.607362 2026] [security2:error] [pid 1876:tid 1876] [client 199.96.167.180:51329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.technicallydental.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.technicallydental.com"] [uri "/2009/07/disaster-recovery-done-right.html"] [unique_id "aukvo6wh-dFZRNWlIJpptwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:09:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:09:44.106706 2026] [security2:error] [pid 22929:tid 22929] [client 199.96.167.180:52739] ...
show more
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:09:44.106706 2026] [security2:error] [pid 22929:tid 22929] [client 199.96.167.180:52739] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vexxarr.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vexxarr.com"] [uri "/2009/03/open-letter-to-sci-fi-channel-and-mr.html"] [unique_id "auWwWBAqGR8slMQIWFoDAwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 08:29:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:29:44.468719 2026] [security2:error] [pid 3428:tid 3428] [client 199.96.167.180:53099] M ...
show more
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:29:44.468719 2026] [security2:error] [pid 3428:tid 3428] [client 199.96.167.180:53099] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||museum.henning.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "museum.henning.org"] [uri "/ander000/"] [unique_id "auRVeNV7wc10QGrf55E0uwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 18:12:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:12:46.943261 2026] [security2:error] [pid 5369:tid 5369] [client 199.96.167.180:56881] M ...
show more
(mod_security) mod_security (id:210350) triggered by 199.96.167.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:12:46.943261 2026] [security2:error] [pid 5369:tid 5369] [client 199.96.167.180:56881] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.doctorc.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.doctorc.net"] [uri "/Labs/Lab19/NOTES/Peristal.htm"] [unique_id "auI7Hl6PH--UmBbCVezZlQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-14 08:38:54
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 08:38:54
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
lp
2026-09-13 10:50:49
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.167.180
2026-09-13T12:33:49+02:00 vpn Access-Reject 'loux' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.167.180
2026-09-13T12:33:49+02:00 vpn Access-Reject 'loux' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-13 04:50:29
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.167.180
2026-09-13T06:38:51+02:00 vpn Access-Reject 'user8' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.167.180
2026-09-13T06:38:51+02:00 vpn Access-Reject 'user8' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-10 00:22:45
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.167.180
2026-09-10T01:53:32+02:00 vpn Access-Reject '20.195.167.132' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.167.180
2026-09-10T01:53:32+02:00 vpn Access-Reject '20.195.167.132' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-09 03:22:11
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 199.96.167.180
2026-09-09T04:08:59+02:00 vpn Access-Reject 'tfsreports' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<re ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 199.96.167.180
2026-09-09T04:08:59+02:00 vpn Access-Reject 'tfsreports' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-09T04:10:19+02:00 vpn Access-Reject 'tgarcia' station: 199.96.167.180 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-01 08:41:53
UTC ·
(2 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
2026-06-25 01:47:00
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-46.199.96.167.180.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-06-21 15:55:33
UTC ·
(4 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-55.199.96.167.180.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
