🇺🇸
TPI-Abuse
2026-11-07 20:29:13
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:29:08.563639 2026] [security2:error] [pid 11374:tid 11374] [client 170.168.173.58:54913] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:29:08.563639 2026] [security2:error] [pid 11374:tid 11374] [client 170.168.173.58:54913] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.aden.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.aden.us"] [uri "/ACS/acs_001.htm"] [unique_id "au-KFFpN83tXxXP0zEmjYwAAADw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
FireGuard Server
2026-10-31 09:40:07
UTC ·
(1 week ago)
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=443
Port Scan
Hacking
🇨🇿
Countryman
2026-10-23 12:13:09
UTC ·
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-10-23 00:10:01
UTC ·
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇪🇸
librebit
2026-10-15 06:26:41
UTC ·
(3 weeks ago)
Brute force
Brute-Force
🇨🇭
backslash
2026-10-15 00:07:03
UTC ·
(3 weeks ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
2026-10-14 23:31:38
UTC ·
(3 weeks ago)
SSH tarpit (endlessh) connection from 170.168.173.58
Brute-Force
SSH
🇨🇿
Countryman
2026-10-11 17:51:56
UTC ·
(3 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2026-10-05 17:35:01
UTC ·
(1 month ago)
SSH tarpit (endlessh) connection from 170.168.173.58
Brute-Force
SSH
🇨🇿
lp
2026-09-15 03:21:49
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 170.168.173.58
2026-09-15T04:39:44+02:00 vpn Access-Reject 'guest' station: 170.168.173.58 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 170.168.173.58
2026-09-15T04:39:44+02:00 vpn Access-Reject 'guest' station: 170.168.173.58 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
agabeckov
2026-09-10 03:14:15
UTC ·
(1 month ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇺🇸
TPI-Abuse
2026-03-26 13:50:54
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.173.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 09:50:47.474727 2026] [security2:error] [pid 24458:tid 24458] [client 170.168.173.58:31003] ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.173.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 09:50:47.474727 2026] [security2:error] [pid 24458:tid 24458] [client 170.168.173.58:31003] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||method-one.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "method-one.net"] [uri "/wp-json/wp/v2/users"] [unique_id "acU5t1gGWzmjyUIt-22BGAAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 21:25:34
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.173.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 17:25:29.342124 2026] [security2:error] [pid 12140:tid 12140] [client 170.168.173.58:43279] ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.173.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 17:25:29.342124 2026] [security2:error] [pid 12140:tid 12140] [client 170.168.173.58:43279] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||goodpage.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "goodpage.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acMBSQEM_eWNKKJlTG3fBwAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
