🇪🇸
librebit
2026-11-10 02:45:55
UTC ·
(3 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-08 17:39:36
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:39:30.474931 2026] [security2:error] [pid 15330:tid 15346] [client 170.168.175.206:1631 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:39:30.474931 2026] [security2:error] [pid 15330:tid 15346] [client 170.168.175.206:16311] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/finalizar-comprar/"] [unique_id "avCz0g89GyEgkkcQpTON2AAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 23:05:52
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:05:49.742044 2026] [security2:error] [pid 14654:tid 14654] [client 170.168.175.206:4943 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:05:49.742044 2026] [security2:error] [pid 14654:tid 14654] [client 170.168.175.206:49437] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/three-hours-in-the-company-of-angels-anita-harless-april-18-2011/"] [unique_id "au-uzVkZNR8pJys9PTuF4QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 03:35:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:35:45.828552 2026] [security2:error] [pid 17753:tid 17753] [client 170.168.175.206:3477 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:35:45.828552 2026] [security2:error] [pid 17753:tid 17753] [client 170.168.175.206:34777] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.scoutinsignia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.scoutinsignia.com"] [uri "/servknot.htm"] [unique_id "auQQkXrpRpQLm06mM_VjkQAAAHo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 15:29:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:29:09.175585 2026] [security2:error] [pid 29698:tid 29698] [client 170.168.175.206:5622 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:29:09.175585 2026] [security2:error] [pid 29698:tid 29698] [client 170.168.175.206:56229] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.doctorc.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.doctorc.net"] [uri "/Labs/Lab2/Notes/Prussblu.htm"] [unique_id "auNmRYsgtQytwWX_L49v8wAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-18 11:42:20
UTC ·
(3 weeks ago)
SSH tarpit (endlessh) connection from 170.168.175.206
Brute-Force
SSH
2026-10-12 03:41:31
UTC ·
(1 month ago)
SSH tarpit (endlessh) connection from 170.168.175.206
Brute-Force
SSH
🇪🇸
librebit
2026-09-22 00:50:56
UTC ·
(1 month ago)
Brute force
Brute-Force
2026-09-16 13:52:52
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-12 03:21:42
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 3 attempts were recorded from 170.168.175.206
2026-09-12T04:25:04+02:00 vpn Access-Reject '88.35.237.242' station: 170.168.175.206 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 170.168.175.206
2026-09-12T04:25:04+02:00 vpn Access-Reject '88.35.237.242' station: 170.168.175.206 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-12T04:26:23+02:00 vpn Access-Reject '88.43.54.50' station: 170.168.175.206 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-12T04:27:43+02:00 vpn Access-Reject '88.54.226.52' station: 170.168.175.206 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇪🇸
librebit
2026-09-11 05:42:49
UTC ·
(2 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-05 14:52:35
UTC ·
(2 months ago)
Brute force
Brute-Force
🇨🇭
backslash
2026-08-25 00:06:21
UTC ·
(2 months ago)
block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0
SQL Injection
2026-08-14 07:31:35
UTC ·
(2 months ago)
Web Spam
