🇪🇸
librebit
2026-10-27 07:52:34
(1 day ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-26 17:13:02
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:12:56.774760 2026] [security2:error] [pid 17663:tid 17663] [client 170.168.242.158:2775 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:12:56.774760 2026] [security2:error] [pid 17663:tid 17663] [client 170.168.242.158:27755] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kennythompson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kennythompson.com"] [uri "/gallery/vacations/hawaii/hawaii.htm"] [unique_id "at-KGCnzp29f-IJZ_5Ao0QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-10-26 06:08:11
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-23 21:25:58
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:25:54.401768 2026] [security2:error] [pid 1729:tid 1739] [client 170.168.242.158:12199] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:25:54.401768 2026] [security2:error] [pid 1729:tid 1739] [client 170.168.242.158:12199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||geistmartialarts.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "geistmartialarts.com"] [uri "/student-resources.html"] [unique_id "atvQ4tQGVEBQshPLQEinrgAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-09-16 21:02:14
(1 month ago)
http-bad-user-agent - IP: 170.168.242.158 - time="2026-09-16T23:02:14+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 170.168.242.158 (NL/59651) : 4h ban on Ip 170.168.242.15 ...
show more
http-bad-user-agent - IP: 170.168.242.158 - time="2026-09-16T23:02:14+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 170.168.242.158 (NL/59651) : 4h ban on Ip 170.168.242.158" module=db
show less
Bad Web Bot
🇳🇱
DonAtari
2026-07-15 01:12:07
(3 months ago)
DShield firewall scan - TCP to port 9000
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-03-30 05:06:40
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:06:36.668642 2026] [security2:error] [pid 18666:tid 18666] [client 170.168.242.158:3246 ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:06:36.668642 2026] [security2:error] [pid 18666:tid 18666] [client 170.168.242.158:32463] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||calvarycavaliers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "acoE3CATVxmhGjJxyx30CAAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-17 19:03:33
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 15:03:25.755206 2026] [security2:error] [pid 30195:tid 30195] [client 170.168.242.158:4087 ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 15:03:25.755206 2026] [security2:error] [pid 30195:tid 30195] [client 170.168.242.158:40877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||resilientigm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "resilientigm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abmlffumkDUfNR0nGJ1qoAAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 20:27:20
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 16:27:15.428443 2026] [security2:error] [pid 30662:tid 30682] [client 170.168.242.158:3152 ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 16:27:15.428443 2026] [security2:error] [pid 30662:tid 30682] [client 170.168.242.158:31525] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||pref-realestate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pref-realestate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abXEo5NGErxrL1pYD0FTsQAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-14 13:11:26
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 09:11:22.797553 2026] [security2:error] [pid 22526:tid 22535] [client 170.168.242.158:5172 ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.242.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 09:11:22.797553 2026] [security2:error] [pid 22526:tid 22535] [client 170.168.242.158:51729] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||killerrockandroll.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "killerrockandroll.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abVeerObr59hyByr6HXqpQAAAUA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
