🇺🇸
TPI-Abuse
2026-11-14 12:18:26
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:18:17.742181 2026] [security2:error] [pid 28001:tid 28001] [client 170.168.172.37:19545] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 07:18:17.742181 2026] [security2:error] [pid 28001:tid 28001] [client 170.168.172.37:19545] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/aparatos/agitadormagneticodigitalagimaticedccjps.html"] [unique_id "avhRiQRRtnVnA-rFpx-UQAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-14 12:00:14
UTC ·
(23 hours ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-14 05:31:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:31:47.552584 2026] [security2:error] [pid 28019:tid 28019] [client 170.168.172.37:35423] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:31:47.552584 2026] [security2:error] [pid 28019:tid 28019] [client 170.168.172.37:35423] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.silvermoonherbals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.silvermoonherbals.com"] [uri "/smh-cold-relief.html"] [unique_id "avfyQzMm08xD57Q90bgWbAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-09 01:06:37
UTC ·
(6 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 20:04:39
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:04:35.533032 2026] [security2:error] [pid 15330:tid 15350] [client 170.168.172.37:18391] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:04:35.533032 2026] [security2:error] [pid 15330:tid 15350] [client 170.168.172.37:18391] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thomas.kiehnefamily.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thomas.kiehnefamily.us"] [uri "/eldred_v_ashcroft_copyright_extensions_and_the_threat_to_the_public_domain"] [unique_id "avDV0w89GyEgkkcQpTORrgAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 21:13:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 16:13:31.238303 2026] [security2:error] [pid 26378:tid 26378] [client 170.168.172.37:18805] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 16:13:31.238303 2026] [security2:error] [pid 26378:tid 26378] [client 170.168.172.37:18805] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/03/17/oped-victors-bonus-what-israel-could-learn-from-athens/"] [unique_id "au5C-36mhDVqPH_wm7LuXQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-05 01:57:51
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 14:13:39
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:13:36.319138 2026] [security2:error] [pid 13220:tid 13220] [client 170.168.172.37:37317] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:13:36.319138 2026] [security2:error] [pid 13220:tid 13220] [client 170.168.172.37:37317] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.getlawforms.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.getlawforms.com"] [uri "/cardholder-report-of-stolen-credit-card.htm"] [unique_id "auX3kP_3pMgF30r1UK2fWwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-10-18 18:51:46
UTC ·
(3 weeks ago)
Brute-force login attack detected by WordPress firewall.
Brute-Force
Web App Attack
2026-07-02 18:32:28
UTC ·
(4 months ago)
2026-07-02T20:32:27.973760+02:00 polaris wp(sahpa.co.za)[51296]: Blocked authentication attempt for Lisa from 170.168.172.37
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 22:28:25
UTC ·
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 18:28:18.769749 2026] [security2:error] [pid 3149398:tid 3149398] [client 170.168.172.37:20 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.172.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 18:28:18.769749 2026] [security2:error] [pid 3149398:tid 3149398] [client 170.168.172.37:20393] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightupaustralia.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightupaustralia.com.au"] [uri "/"] [unique_id "aeARAoJxjN8r5NnAJmcMiQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
