🇪🇸
librebit
2026-11-14 11:07:19
UTC ·
(11 hours ago)
Brute force
Brute-Force
🇺🇸
Zandro
2026-11-13 04:00:14
UTC ·
(1 day ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-04 23:52:34
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:52:29.232337 2026] [security2:error] [pid 21149:tid 21149] [client 170.168.173.71:36751] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:52:29.232337 2026] [security2:error] [pid 21149:tid 21149] [client 170.168.173.71:36751] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "auvFPUo_tG0y_W_uUoyWagAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 17:56:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:56:01.924285 2026] [security2:error] [pid 18363:tid 18363] [client 170.168.173.71:59805] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 13:56:01.924285 2026] [security2:error] [pid 18363:tid 18363] [client 170.168.173.71:59805] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/bib/gra/gra.html"] [unique_id "auOIsaYzq8E_Lmag3PKLPAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-27 13:23:09
UTC ·
(2 weeks ago)
Brute force
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-10-25 23:46:22
UTC ·
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-25 14:35:11
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.173.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 10:35:05.157140 2026] [security2:error] [pid 16802:tid 16802] [client 170.168.173.71:62089] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.173.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 10:35:05.157140 2026] [security2:error] [pid 16802:tid 16802] [client 170.168.173.71:62089] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ontrek.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ontrek.com"] [uri "/blog/travel/africa-reprise-south-africa-botswana-25th-sept-2018-day-12/"] [unique_id "at4TmckR4nTpxHn4C8FluwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-10-06 10:51:23
UTC ·
(1 month ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 170.168.173.71 (-)
Bad Web Bot
🇨🇭
backslash
2026-09-28 07:48:02
UTC ·
(1 month ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇩🇪
rh24
2026-09-28 07:40:00
UTC ·
(1 month ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 170.168.173.71 (-)
Bad Web Bot
🇳🇱
Alt255
2026-09-24 13:32:44
UTC ·
(1 month ago)
[ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 170.168.173.71 - - [24/Sep/2026:15:31:49 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ...
show more
[ti-01sc] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 170.168.173.71 - - [24/Sep/2026:15:31:49 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
170.168.173.71 - - [24/Sep/2026:15:32:04 +0200] "POST /wp-login.php HTTP/2.0" 200 4486 "https://www.nieuwsvoordietisten.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
170.168.173.71 - - [24/Sep/2026:15:32:07 +0200] "POST /xmlrpc.php HTTP/2.0" 403 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
170.168.173.71 - - [24/Sep/2026:15:32:22 +0200] "POST /wp-login.php HT
...
show less
Brute-Force
Web App Attack
🇬🇷
setupgr
2026-08-29 11:24:25
UTC ·
(2 months ago)
(wplogin_block) Blocked WP-Login Access Attempt 170.168.173.71 (NL/The Netherlands/Groningen/De Wilp/-/[AS59651 ASBLG]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 170.168.173.71 - - [29/Aug/2026:14:19:45 + ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 170.168.173.71 (NL/The Netherlands/Groningen/De Wilp/-/[AS59651 ASBLG]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 170.168.173.71 - - [29/Aug/2026:14:19:45 +0300] "GET /wp-login.php HTTP/1.1" 200 11295 "-" "Wget/1.21.4"
show less
Port Scan
🇫🇷
mrcrassi
2026-08-25 12:44:41
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from SE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This re ...
show more
Triggered Cloudflare WAF (firewallCustom) from SE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
oralunal
2026-08-22 23:20:23
UTC ·
(2 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-14 17:34:40
UTC ·
(4 months ago)
Brute force
Brute-Force
