🇺🇸
TPI-Abuse
2026-11-13 11:28:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:28:49.881426 2026] [security2:error] [pid 784682:tid 784682] [client 170.168.30.112:2362 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:28:49.881426 2026] [security2:error] [pid 784682:tid 784682] [client 170.168.30.112:23623] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tobyjohnson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tobyjohnson.com"] [uri "/review-lake-recreations.html"] [unique_id "avb0cbXyDOsf3kpt_c3zlAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 07:23:47
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:23:41.606191 2026] [security2:error] [pid 10629:tid 10629] [client 170.168.30.112:19151] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:23:41.606191 2026] [security2:error] [pid 10629:tid 10629] [client 170.168.30.112:19151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/memberlist.php"] [unique_id "avVpfaAE7RDRVigdPf5K7QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-10 02:55:05
UTC ·
(5 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-08 11:50:38
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:50:33.922096 2026] [security2:error] [pid 30808:tid 30808] [client 170.168.30.112:58289] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:50:33.922096 2026] [security2:error] [pid 30808:tid 30808] [client 170.168.30.112:58289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.peterjohnsonauthor.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.peterjohnsonauthor.com"] [uri "/houdini-receives-more-honors/"] [unique_id "avBiCU_K9Y3iKxvSeE5c4wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:05:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:05:53.944541 2026] [security2:error] [pid 22918:tid 22918] [client 170.168.30.112:40273] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:05:53.944541 2026] [security2:error] [pid 22918:tid 22918] [client 170.168.30.112:40273] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.scoutinsignia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.scoutinsignia.com"] [uri "/recknot.htm"] [unique_id "au4I8Wsyigy_dmM1VKY6XAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 02:42:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:42:45.529730 2026] [security2:error] [pid 4191938:tid 4191953] [client 170.168.30.112:51 ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:42:45.529730 2026] [security2:error] [pid 4191938:tid 4191953] [client 170.168.30.112:51651] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanacademyofprojectmanagement.com"] [uri "/Top-Project-Management-Certifications-PM-Qualifications.html"] [unique_id "au0-pXH-IZPbCFbcdfzYYwAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-31 02:13:27
UTC ·
(2 weeks ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-29 14:07:14
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 10:07:11.725372 2026] [security2:error] [pid 23797:tid 23797] [client 170.168.30.112:9675] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 10:07:11.725372 2026] [security2:error] [pid 23797:tid 23797] [client 170.168.30.112:9675] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gpaarch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gpaarch.com"] [uri "/Projects/GPA-Architects-Projects-Palm-Springs-International-Airport.html"] [unique_id "auNTD5bxMD_SCLZunFWFbAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 10:23:30
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:23:26.121659 2026] [security2:error] [pid 5763:tid 5763] [client 170.168.30.112:58939] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.30.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:23:26.121659 2026] [security2:error] [pid 5763:tid 5763] [client 170.168.30.112:58939] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pjv.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pjv.us"] [uri "/fluxbb-karen/viewtopic.php"] [unique_id "atyHHkyhiABT3u5lJy9BRwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-10-13 02:06:03
UTC ·
(1 month ago)
http-bad-user-agent - IP: 170.168.30.112 - time="2026-10-13T04:06:02+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 170.168.30.112 (NL/59651) : 4h ban on Ip 170.168.30.112" ...
show more
http-bad-user-agent - IP: 170.168.30.112 - time="2026-10-13T04:06:02+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 170.168.30.112 (NL/59651) : 4h ban on Ip 170.168.30.112" module=db
show less
Bad Web Bot
🇪🇸
librebit
2026-08-18 09:12:10
UTC ·
(2 months ago)
Brute force
Brute-Force
🇩🇪
C C
2026-08-08 22:08:09
UTC ·
(3 months ago)
Distributed scraping attack: 1469 req from 1403 rotating proxy IPs, waves of up to 150 req in 291s on a single URL | this IP: 1 req, 1 blocked
Open Proxy
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-08-02 00:28:43
UTC ·
(3 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇪🇸
librebit
2026-06-24 03:49:06
UTC ·
(4 months ago)
Brute force
Brute-Force
🇺🇸
kosada.com
2026-06-11 03:55:28
UTC ·
(5 months ago)
Web password guessing
Brute-Force
