🇺🇸
TPI-Abuse
2026-11-11 18:00:06
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:59:59.045225 2026] [security2:error] [pid 24440:tid 24440] [client 170.168.243.131:4767 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:59:59.045225 2026] [security2:error] [pid 24440:tid 24440] [client 170.168.243.131:47675] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.30daysout.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.30daysout.com"] [uri "/text/I-Believe.html"] [unique_id "avStHyLjiYaKsG_m4ret5wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 17:02:23
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:02:20.385407 2026] [security2:error] [pid 27312:tid 27312] [client 170.168.243.131:1295 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 12:02:20.385407 2026] [security2:error] [pid 27312:tid 27312] [client 170.168.243.131:12959] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.beirutbazar.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.beirutbazar.com"] [uri "/item/dodo-les-bobos-bon-bon-rose-usd-155/"] [unique_id "avH8nPoTbVsNiCsvR9LfZwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:21:31
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:21:24.091667 2026] [security2:error] [pid 10913:tid 10913] [client 170.168.243.131:4908 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:21:24.091667 2026] [security2:error] [pid 10913:tid 10913] [client 170.168.243.131:49083] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||grandvistalabs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "grandvistalabs.com"] [uri "/privacy.html"] [unique_id "avFYVIdRzPMXt5uNvMdO0wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:52:00
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:51:51.367276 2026] [security2:error] [pid 1649521:tid 1649651] [client 170.168.243.131: ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:51:51.367276 2026] [security2:error] [pid 1649521:tid 1649651] [client 170.168.243.131:59321] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aafmglobal.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aafmglobal.com"] [uri "/Trust-and-Estate-Certification.html"] [unique_id "avEZJ9myRT0fQXsfUNynDAAAAJg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:37:38
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:37:31.638063 2026] [security2:error] [pid 20523:tid 20523] [client 170.168.243.131:9289 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:37:31.638063 2026] [security2:error] [pid 20523:tid 20523] [client 170.168.243.131:9289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||socialstudiesforkids.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/articles/worldhistory/treatyoftordesillas.htm"] [unique_id "au_8iy8iTuItClYQELuwbAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-03 04:54:08
UTC ·
(1 week ago)
Brute force
Brute-Force
🇺🇸
Zandro
2026-11-02 12:00:14
UTC ·
(1 week ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇩🇪
Ilop
2026-11-02 07:30:03
UTC ·
(1 week ago)
[hp-100] 19 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-11-01 06:00:07
UTC ·
(1 week ago)
[hp-100] 19 unsolicited packets to honeypot ports 5555 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-10-29 14:30:12
UTC ·
(1 week ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-10-28 13:49:58
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:49:53.032632 2026] [security2:error] [pid 24961:tid 24961] [client 170.168.243.131:1559 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.243.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:49:53.032632 2026] [security2:error] [pid 24961:tid 24961] [client 170.168.243.131:15597] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rahjx.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rahjx.net"] [uri "/htmltags.htm"] [unique_id "auH9gUY0I7yUB1lETPHAtQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-10-28 13:00:14
UTC ·
(2 weeks ago)
[hp-100] 19 unsolicited packets to honeypot ports 8000 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-10-25 08:00:29
UTC ·
(2 weeks ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-10-24 05:30:06
UTC ·
(2 weeks ago)
[hp-100] 19 unsolicited packets to honeypot ports 5555 (OCI DShield sensor)
Port Scan
🇩🇪
Ilop
2026-10-22 09:00:52
UTC ·
(2 weeks ago)
[hp-100] 8 unsolicited packets to honeypot ports 443 (OCI DShield sensor)
Port Scan
