🇺🇸
TPI-Abuse
2026-11-07 21:15:15
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:15:10.523519 2026] [security2:error] [pid 5808:tid 5808] [client 170.168.175.181:35653] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:15:10.523519 2026] [security2:error] [pid 5808:tid 5808] [client 170.168.175.181:35653] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.verdeprofundo.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.verdeprofundo.net"] [uri "/documental-sobre-la-reserva-marina-de-lira/"] [unique_id "au-U3vazcGQDKKpeybJ4XAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 06:05:14
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:05:09.711126 2026] [security2:error] [pid 3488:tid 3488] [client 170.168.175.181:16781] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:05:09.711126 2026] [security2:error] [pid 3488:tid 3488] [client 170.168.175.181:16781] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sabbathseminars.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sabbathseminars.net"] [uri "/LBGTQIA-at-Sabbath-Seminars/The-LLU-Board-Sexuality-Taskfo/The-October-2024-Sexuality-Tas/the-october-2024-sexuality-taskforce-report.html"] [unique_id "aul5lY1umi4P3QMg4_HboQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:17:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:17:11.259343 2026] [security2:error] [pid 13081:tid 13081] [client 170.168.175.181:1398 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:17:11.259343 2026] [security2:error] [pid 13081:tid 13081] [client 170.168.175.181:13989] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wailthelifeofbudpowell.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wailthelifeofbudpowell.com"] [uri "/intro-to-book/"] [unique_id "atDSVwH_QFxL6y_Tl4NjqwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
gurnip
2026-03-31 02:42:45
UTC ·
(7 months ago)
Vulnerability probe of page /wp-json/wp/v2/users, not found on server.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-31 00:02:53
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 20:02:49.713865 2026] [security2:error] [pid 18540:tid 18540] [client 170.168.175.181:4645 ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 20:02:49.713865 2026] [security2:error] [pid 18540:tid 18540] [client 170.168.175.181:46453] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||genesis-group.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "genesis-group.net"] [uri "/wp-json/wp/v2/users"] [unique_id "acsPKXtrbpiavkaZvF8e0AAAABA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bazter.pro
2026-03-20 23:01:52
UTC ·
(7 months ago)
Auto-Ban [2026-03-21 01:01:49]: CRITICAL: Sensitive files (2) [Paths: 3] | Details: Sensitive files/paths: /wp-admin/, /wp-login.php?redirect_to=https%3A%2F%2Fblog.it-srv.org%2Fwp-admin%2F&reauth=1 | Other paths: /wp-login.php, /wp-admin/, /wp-login. ...
show more
Auto-Ban [2026-03-21 01:01:49]: CRITICAL: Sensitive files (2) [Paths: 3] | Details: Sensitive files/paths: /wp-admin/, /wp-login.php?redirect_to=https%3A%2F%2Fblog.it-srv.org%2Fwp-admin%2F&reauth=1 | Other paths: /wp-login.php, /wp-admin/, /wp-login.php?redirect_to=https%3A%2F%2Fblog.it-srv.org%2Fwp-admin%2F&reauth=1
show less
Web App Attack
Hacking
🇦🇺
screwlooseit.com.au
2026-03-20 11:33:00
UTC ·
(7 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-03-18 09:50:14
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 05:50:07.999522 2026] [security2:error] [pid 12164:tid 12164] [client 170.168.175.181:1803 ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 18 05:50:07.999522 2026] [security2:error] [pid 12164:tid 12164] [client 170.168.175.181:18033] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k-h-w.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k-h-w.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abp1T45I6BcuVUZnOA9lggAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-11 15:47:51
UTC ·
(7 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇫🇮
Shaik Sai Meera
2026-03-10 12:30:09
UTC ·
(7 months ago)
IM360 WAF: Request indicates a Headless browser
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 14:52:11
UTC ·
(10 months ago)
"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access"
DDoS Attack
SQL Injection
Exploited Host
🇺🇸
TPI-Abuse
2025-11-27 23:59:37
UTC ·
(11 months ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 18:59:32.380327 2025] [security2:error] [pid 12065:tid 12065] [client 170.168.175.181:5858 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 18:59:32.380327 2025] [security2:error] [pid 12065:tid 12065] [client 170.168.175.181:58581] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||infojeffreysbay.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "infojeffreysbay.com"] [uri "/"] [unique_id "aSjl5KQvXKTz-qsEwBVXVgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2025-11-11 07:09:18
UTC ·
(11 months ago)
WP probing for vulnerabilities
Hacking
Exploited Host
