🇺🇸
TPI-Abuse
2026-10-20 22:35:09
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:35:05.102549 2026] [security2:error] [pid 21239:tid 21239] [client 170.168.175.251:63797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vividlee.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vividlee.com"] [uri "/2002/VernalFalls/index.html"] [unique_id "atfsmZzMfTyINz0G6yh20wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 18:21:52
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:21:44.918444 2026] [security2:error] [pid 22578:tid 22578] [client 170.168.175.251:39635] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rockitfish.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rockitfish.com"] [uri "/surf4.html"] [unique_id "atexOEVzpw65dNtrUfWuEQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-27 12:06:33
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇨🇭
backslash
2026-09-18 00:12:05
(1 month ago)
block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0
SQL Injection
🇨🇦
Webmestre
2026-09-02 14:02:00
(1 month ago)
Attempts against non-existent WordPress and PHP pages /wp-json/
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-02 06:25:01
(1 month ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-02 01:35:38
(1 month ago)
[02/Sep/2026:04:35:37 +0300] -- 170.168.175.251 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-08-28 08:31:28
(1 month ago)
[28/Aug/2026:11:31:27 +0300] -- 170.168.175.251 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-07-30 17:41:44
(2 months ago)
37.72.141.108-security[07/30/2026:17:41:41-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedire ...
show more
37.72.141.108-security[07/30/2026:17:41:41-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryforsecurity45.80.105.141-security[07/30/2026:17:29:30-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryforsecurity45.159.21.70-security[07/30/2026:17:29:31-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryforsecurity83.97.117.65-security[07/30/2026:17:29:22-0000]\"GET\"FAILEDLOGINcpdavd:Couldnotfetchsystemhomedirectoryforsecurity170.168.175.251-security[07/30/2026:17:29:23-0000]\"GET\"FAILEDLOGINcpdavd:CouldnotfetchsystemhomedirectoryforsecurityIPAddressesBlocked:37.72.141.108\(FR/France/-\)45.80.105.141\(US/UnitedStates/-\)45.159.21.70\(NL/TheNetherlands/-\)83.97.117.65\(FI/Finland/-\)
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 16:04:23
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 00:14:46
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:14:42.372478 2026] [security2:error] [pid 15610:tid 15610] [client 170.168.175.251:52011] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aacoustics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aacoustics.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiisctfhp8-9CgM1Fr417AAAAAg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-02 02:50:28
(4 months ago)
FPROCO WEBEXPLOIT 170.168.175.251 (170.168.175.251)
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 08:50:49
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 04:50:45.061112 2026] [security2:error] [pid 21241:tid 21241] [client 170.168.175.251:63691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wisewerks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wisewerks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahlTZXyPR92yK6TWGCrP-AAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-28 04:40:48
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 00:40:41.392119 2026] [security2:error] [pid 19599:tid 19599] [client 170.168.175.251:31981] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gkwire.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gkwire.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahfHSb9mHsf3GyfIXVpeCgAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 11:17:35
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.175.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 07:17:28.981773 2026] [security2:error] [pid 12552:tid 12552] [client 170.168.175.251:29711] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||esad.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "esad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag2YSMDO_EILLEuxLMdpHgAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
