212.18.113.53

(mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:37:03.561165 2026] [security2:error] [pid 1079:tid 1079] [client 212.18.113.53:48345] Mod ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:37:03.561165 2026] [security2:error] [pid 1079:tid 1079] [client 212.18.113.53:48345] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||weddingnapkins.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "weddingnapkins.com"] [uri "/christmas-wedding-napkins.htm"] [unique_id "avRTX7XIqFSzO5i_zz4OYgAAAB0"] show less

(mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:23:16.445188 2026] [security2:error] [pid 28431:tid 28431] [client 212.18.113.53:58977] M ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:23:16.445188 2026] [security2:error] [pid 28431:tid 28431] [client 212.18.113.53:58977] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.natural-history-conservation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.natural-history-conservation.com"] [uri "/WRE.htm"] [unique_id "auJZtCFv6qxt1DgjSZ11xAAAAAI"] show less

(mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:00:44.634430 2026] [security2:error] [pid 28255:tid 28255] [client 212.18.113.53:43429] M ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:00:44.634430 2026] [security2:error] [pid 28255:tid 28255] [client 212.18.113.53:43429] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thejuniverse.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thejuniverse.org"] [uri "/PUBLIC/LesterCircle/LCorder.html"] [unique_id "auG5vDhtaZjBUHRXxoZtKgAAABM"] show less

(mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:35:11.343481 2026] [security2:error] [pid 7645:tid 7645] [client 212.18.113.53:25899] Mod ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:35:11.343481 2026] [security2:error] [pid 7645:tid 7645] [client 212.18.113.53:25899] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||katharinanitzpon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "katharinanitzpon.com"] [uri "/kids/kids.html"] [unique_id "at-PT4N6j--wO0MO52O26QAAAAk"] show less

(mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:29:48.041010 2026] [security2:error] [pid 29584:tid 29584] [client 212.18.113.53:50025] M ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:29:48.041010 2026] [security2:error] [pid 29584:tid 29584] [client 212.18.113.53:50025] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bendersite.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bendersite.com"] [uri "/wp-login.php"] [unique_id "ao4zfLXD4pOkg14XJRu8EAAAAAs"] show less

(mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:19:26.384797 2026] [security2:error] [pid 22374:tid 22374] [client 212.18.113.53:14815] M ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:19:26.384797 2026] [security2:error] [pid 22374:tid 22374] [client 212.18.113.53:14815] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nnrentacar.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nnrentacar.com"] [uri "/"] [unique_id "aotj3sC4OcSHSyXaY55RnwAAADc"] show less

(mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 23:42:49.262190 2026] [security2:error] [pid 174281:tid 174281] [client 212.18.113.53:51283] ... show more (mod_security) mod_security (id:210350) triggered by 212.18.113.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 23:42:49.262190 2026] [security2:error] [pid 174281:tid 174281] [client 212.18.113.53:51283] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thestardance.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thestardance.com"] [uri "/"] [unique_id "anAOOe4is0m7NE07ag7mPQAAAAE"] show less

livingbalance.earth 212.18.113.53 - - [15/Jun/2026:01:42:26 -0500] "POST /xmlrpc.php HTTP/1.1" 405 150 "-" "Wget/1.21.4" livingbalance.earth 212.18.113.53 - - [15/Jun/2026:01:42:26 -0500] "POST /xmlrpc.php HTTP/1.1" 405 150 "-" "curl/7.88.1" livingba ... show more livingbalance.earth 212.18.113.53 - - [15/Jun/2026:01:42:26 -0500] "POST /xmlrpc.php HTTP/1.1" 405 150 "-" "Wget/1.21.4" livingbalance.earth 212.18.113.53 - - [15/Jun/2026:01:42:26 -0500] "POST /xmlrpc.php HTTP/1.1" 405 150 "-" "curl/7.88.1" livingbalance.earth 212.18.113.53 - - [15/Jun/2026:01:42:27 -0500] "POST /xmlrpc.php HTTP/1.1" 405 150 "-" "Wget/1.21.4" ... show less

GlobalProtect Password Spraying

Wordpress probing for vulnerabilities

XML RPC Scan Activities

LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.18.113.53 (US/United States/-): 1 in the last 3600 secs

Incoming Layer 7 Flood Detected

Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.113.53 2025-08-01T21:19:13+02:00 vpn Access-Reject 'rmartinez' station: 212.18.113.53 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 212.18.113.53 2025-08-01T21:19:13+02:00 vpn Access-Reject 'rmartinez' station: 212.18.113.53 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-08-01T21:30:01+02:00 vpn Access-Reject 'nnguyen' station: 212.18.113.53 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 1 attempts were recorded from 212.18.113.53 2025-07-18T17:10:45+02:00 vpn Access-Reject 'ldap' station: 212.18.113.53 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'