🇺🇸
TPI-Abuse
2026-11-15 22:12:31
UTC ·
(5 minutes ago)
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:12:26.582374 2026] [security2:error] [pid 14106:tid 14106] [client 170.168.240.86:15011] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:12:26.582374 2026] [security2:error] [pid 14106:tid 14106] [client 170.168.240.86:15011] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.whodatnation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.whodatnation.com"] [uri "/2010/08/30/supa-saints-latest-video-how-to-make-friends-with-viking-fans/"] [unique_id "avouSiTKSODR8fCQgZqYYQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-11-13 19:00:16
UTC ·
(2 days ago)
[hp-100] 38 unsolicited packets to honeypot ports 9000,7547 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-11-12 17:30:08
UTC ·
(3 days ago)
[hp-100] 46 unsolicited packets to honeypot ports 443,9000,8080 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-11-12 03:18:23
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:18:19.078955 2026] [security2:error] [pid 19236:tid 19236] [client 170.168.240.86:26487] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:18:19.078955 2026] [security2:error] [pid 19236:tid 19236] [client 170.168.240.86:26487] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/js/assets/assets/js/images/lib/jquery.mousewheel-3.0.6.pack.js"] [unique_id "avUv-5flmX6G0cPBKDPMTgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-11-11 16:00:14
UTC ·
(4 days ago)
[hp-100] 19 unsolicited packets to honeypot ports 9000 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-11-11 12:53:59
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:53:55.085694 2026] [security2:error] [pid 26834:tid 26834] [client 170.168.240.86:12749] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:53:55.085694 2026] [security2:error] [pid 26834:tid 26834] [client 170.168.240.86:12749] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/recipes/breakfast/french-toast/"] [unique_id "avRlYyKh05HcJaVIt5Aa6AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-11-10 13:30:14
UTC ·
(5 days ago)
[hp-100] 19 unsolicited packets to honeypot ports 5555 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-11-10 12:34:21
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:34:14.750072 2026] [security2:error] [pid 28472:tid 28472] [client 170.168.240.86:16083] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:34:14.750072 2026] [security2:error] [pid 28472:tid 28472] [client 170.168.240.86:16083] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kriske.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kriske.com"] [uri "/highway/about.html"] [unique_id "avMPRheEMtJGICMKH_L7jwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-10 08:01:48
UTC ·
(5 days ago)
Brute force
Brute-Force
🇩🇪
Ilop
2026-11-09 12:00:42
UTC ·
(6 days ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇺🇸
Zandro
2026-11-09 12:00:14
UTC ·
(6 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-08 05:56:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:56:13.686910 2026] [security2:error] [pid 21489:tid 21489] [client 170.168.240.86:10961] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:56:13.686910 2026] [security2:error] [pid 21489:tid 21489] [client 170.168.240.86:10961] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||clubfansite.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "clubfansite.com"] [uri "/leonardowilhelmdicaprio/"] [unique_id "avAO_Ze5xbF09O8LlBf78gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-11-07 23:00:26
UTC ·
(1 week ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-11-06 22:34:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:34:44.531798 2026] [security2:error] [pid 4918:tid 4918] [client 170.168.240.86:32403] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.240.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:34:44.531798 2026] [security2:error] [pid 4918:tid 4918] [client 170.168.240.86:32403] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.directoryofdrugs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.directoryofdrugs.com"] [uri "/sanctura.htm"] [unique_id "au5WBHLlPEDSlz5QANyJ6QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-11-06 21:30:16
UTC ·
(1 week ago)
[hp-100] 19 unsolicited packets to honeypot ports 9000 (OCI DShield sensor)
Port Scan
