🇺🇸
TPI-Abuse
2026-11-10 01:57:53
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:57:49.770507 2026] [security2:error] [pid 20199:tid 20199] [client 170.168.242.139:3140 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:57:49.770507 2026] [security2:error] [pid 20199:tid 20199] [client 170.168.242.139:31409] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.limobuswichita.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.limobuswichita.com"] [uri "/limo-bus-wichita-faq.html"] [unique_id "avJ6HdqZYy8cS5O7zTi9PgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:36:35
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:36:31.189470 2026] [security2:error] [pid 27170:tid 27170] [client 170.168.242.139:2740 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:36:31.189470 2026] [security2:error] [pid 27170:tid 27170] [client 170.168.242.139:27405] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/general-news/rotary-club-of-forest-grove-wreath-sale/"] [unique_id "avJnD-FUU61zs8dV4UhkPwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-10 00:28:02
UTC ·
(8 hours ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:06:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:06:43.549811 2026] [security2:error] [pid 13435:tid 13435] [client 170.168.242.139:6263 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:06:43.549811 2026] [security2:error] [pid 13435:tid 13435] [client 170.168.242.139:62637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.kaneprotectivecoatings.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.kaneprotectivecoatings.com"] [uri "/Tanks/Barrow Fuel Storage Facility/"] [unique_id "au-g84niII4NcAOyaLvwkAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 09:20:24
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:20:17.128412 2026] [security2:error] [pid 29034:tid 29034] [client 170.168.242.139:1383 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 05:20:17.128412 2026] [security2:error] [pid 29034:tid 29034] [client 170.168.242.139:13833] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lamanchaorchards.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lamanchaorchards.com"] [uri "/almond_products.html"] [unique_id "auG-UdpCkFb67m6vQDbjPgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 22:21:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:21:06.212120 2026] [security2:error] [pid 11234:tid 11234] [client 170.168.242.139:3410 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.242.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:21:06.212120 2026] [security2:error] [pid 11234:tid 11234] [client 170.168.242.139:34109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||heckenbach.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "heckenbach.org"] [uri "/fuertsch.html"] [unique_id "auEj0hXmIwL_b_aijXng2gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-27 15:14:08
UTC ·
(1 week ago)
170.168.242.139 - - [27/Oct/2026:16:14:02 +0100] "GET /wp-login.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
...
Web App Attack
🇨🇭
backslash
2026-10-25 18:42:00
UTC ·
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇪🇸
librebit
2026-10-23 00:09:14
UTC ·
(2 weeks ago)
Brute force
Brute-Force
🇮🇩
bps-statistics
2026-10-22 00:22:49
UTC ·
(2 weeks ago)
WP Login Scan Activities: "2026-10-22T07:22:49.092+07:00" "/wp-login.php" "170.168.242.139" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Web App Attack
🇨🇭
backslash
2026-08-07 02:18:00
UTC ·
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇬🇧
spamverify.com
2026-07-31 08:45:27
UTC ·
(3 months ago)
Honeypot Hit: Contact Form
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
2026-07-05 19:19:40
UTC ·
(4 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇫🇷
masterguru
2026-02-06 23:05:52
UTC ·
(9 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 170.168.242.139 (NL/The Netherlands/-): 1 in the last 3600 secs (0-196)
Hacking
🇫🇷
masterguru
2026-02-06 22:36:19
UTC ·
(9 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 170.168.242.139 (NL/The Netherlands/-): 1 in the last 3600 secs (0-193)
Hacking
