🇺🇸
TPI-Abuse
2026-11-14 21:13:02
UTC ·
(29 minutes ago)
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:12:58.446610 2026] [security2:error] [pid 12637:tid 12637] [client 170.168.96.63:24543] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:12:58.446610 2026] [security2:error] [pid 12637:tid 12637] [client 170.168.96.63:24543] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2014/04/emily-browning-bikini-pictures/"] [unique_id "avjO2kTyJjKf3HorHlc8zgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:11:27
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:11:24.064300 2026] [security2:error] [pid 18442:tid 18446] [client 170.168.96.63:9211] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:11:24.064300 2026] [security2:error] [pid 18442:tid 18446] [client 170.168.96.63:9211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbestcarting.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbestcarting.com"] [uri "/dumpster-rental-centre-island/"] [unique_id "avGALMKBvWN8djWlEWelWAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 06:10:44
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:10:38.602227 2026] [security2:error] [pid 29150:tid 29150] [client 170.168.96.63:17463] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:10:38.602227 2026] [security2:error] [pid 29150:tid 29150] [client 170.168.96.63:17463] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cmgpartners.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cmgpartners.com"] [uri "/content/new-product-launch/"] [unique_id "avASXgUhvuh1fM0yvVbzGgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 07:26:16
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:26:11.541791 2026] [security2:error] [pid 27251:tid 27251] [client 170.168.96.63:9363] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:26:11.541791 2026] [security2:error] [pid 27251:tid 27251] [client 170.168.96.63:9363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||firstlovedevotions.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "firstlovedevotions.com"] [uri "/6E/6_9_evening.htm"] [unique_id "athpE37Xz6aRBfRR9_cuTAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-14 07:50:39
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 170.168.96.63
2026-09-14T08:19:33+02:00 vpn Access-Reject 'tse46' station: 170.168.96.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 170.168.96.63
2026-09-14T08:19:33+02:00 vpn Access-Reject 'tse46' station: 170.168.96.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-14T08:20:53+02:00 vpn Access-Reject 'tse47' station: 170.168.96.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 21:54:27
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 21:54:27
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 03:21:57
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 3 attempts were recorded from 170.168.96.63
2026-09-10T04:06:34+02:00 vpn Access-Reject 'goctors4' station: 170.168.96.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 3 attempts were recorded from 170.168.96.63
2026-09-10T04:06:34+02:00 vpn Access-Reject 'goctors4' station: 170.168.96.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-10T04:07:53+02:00 vpn Access-Reject 'goctors5' station: 170.168.96.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-10T04:09:12+02:00 vpn Access-Reject 'goctors6' station: 170.168.96.63 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 00:37:28
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇪🇸
librebit
2026-09-08 10:47:37
UTC ·
(2 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-09-01 14:47:36
UTC ·
(2 months ago)
Brute force
Brute-Force
🇨🇭
backslash
2026-09-01 00:06:10
UTC ·
(2 months ago)
block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0
SQL Injection
🇺🇸
TPI-Abuse
2026-07-08 08:04:16
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 04:04:09.157029 2026] [security2:error] [pid 9874:tid 9886] [client 170.168.96.63:13627] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.96.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 04:04:09.157029 2026] [security2:error] [pid 9874:tid 9886] [client 170.168.96.63:13627] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||latinofederation.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "latinofederation.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ak4EeUB6DHe-FDWclRqB4AAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-28 07:13:49
UTC ·
(4 months ago)
Fail2Ban banned 170.168.96.63 for security violations in jail wp-armour. Log: 2026/06/28 07:13:48 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 170.168.96.63 | Target: wplogin" , client: 170.168.96.63, server: [REDACTED], request: ...
show more
Fail2Ban banned 170.168.96.63 for security violations in jail wp-armour. Log: 2026/06/28 07:13:48 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 170.168.96.63 | Target: wplogin" , client: 170.168.96.63, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
