🇺🇸
TPI-Abuse
2026-11-15 05:13:42
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:13:37.971033 2026] [security2:error] [pid 31643:tid 31643] [client 170.168.97.143:61425] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 00:13:37.971033 2026] [security2:error] [pid 31643:tid 31643] [client 170.168.97.143:61425] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/nutten-treffen/"] [unique_id "avk_gUiu9T_2chUJrKazygAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 22:47:06
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:47:03.137743 2026] [security2:error] [pid 14362:tid 14362] [client 170.168.97.143:60119] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 17:47:03.137743 2026] [security2:error] [pid 14362:tid 14362] [client 170.168.97.143:60119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||harrygant.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "harrygant.com"] [uri "/store/p5/HARRY_GANT_#_33_FAREWELL_TOUR_1:43_DIE_CAST_CHEVROLET.html"] [unique_id "avjk57tTuaK5rjGkviFc2AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 13:09:20
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:09:14.253322 2026] [security2:error] [pid 2552:tid 2552] [client 170.168.97.143:59263] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:09:14.253322 2026] [security2:error] [pid 2552:tid 2552] [client 170.168.97.143:59263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/"] [unique_id "avcL-sv9DjhSLGroriv3GwAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:10:41
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:10:36.089038 2026] [security2:error] [pid 6504:tid 6520] [client 170.168.97.143:30553] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:10:36.089038 2026] [security2:error] [pid 6504:tid 6520] [client 170.168.97.143:30553] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ennerdale.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ennerdale.org"] [uri "/Palatinate.html"] [unique_id "avVYXMLI4MDa4pIirH_dKAAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:07:42
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:07:39.199359 2026] [security2:error] [pid 13199:tid 13199] [client 170.168.97.143:61645] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:07:39.199359 2026] [security2:error] [pid 13199:tid 13199] [client 170.168.97.143:61645] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/posts/9272"] [unique_id "avJuWzCJZFCwhFhsoimMvAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 12:33:17
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:33:14.136224 2026] [security2:error] [pid 17915:tid 17915] [client 170.168.97.143:35449] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:33:14.136224 2026] [security2:error] [pid 17915:tid 17915] [client 170.168.97.143:35449] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||comfortcartel.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "comfortcartel.com"] [uri "/maxeltoft/index.php"] [unique_id "atylikqEyg1oLLQGaMj8mgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-28 07:19:18
UTC ·
(3 months ago)
PARMACOM WEBEXPLOIT 170.168.97.143 (170.168.97.143)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 22:14:12
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:14:06.421208 2026] [security2:error] [pid 31806:tid 31806] [client 170.168.97.143:30281] ...
show more
(mod_security) mod_security (id:225170) triggered by 170.168.97.143 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:14:06.421208 2026] [security2:error] [pid 31806:tid 31806] [client 170.168.97.143:30281] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||seariversummit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "seariversummit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amfYLh7Sv8CMblAUvOgtqQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-07-06 16:58:23
UTC ·
(4 months ago)
(wplogin_block) Blocked WP-Login Access Attempt 170.168.97.143 (ES/Spain/Madrid/Titulcia/-/[AS59651 ASBLG]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 170.168.97.143 - - [06/Jul/2026:19:43:08 +0300] "GET / ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 170.168.97.143 (ES/Spain/Madrid/Titulcia/-/[AS59651 ASBLG]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 170.168.97.143 - - [06/Jul/2026:19:43:08 +0300] "GET /wp-login.php HTTP/1.1" 200 11504 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
show less
Port Scan
🇲🇽
octageeks.com
2026-07-06 04:17:55
UTC ·
(4 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇮🇹
VHosting
2026-03-26 23:37:05
UTC ·
(7 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇫🇷
masterguru
2026-03-05 04:25:42
UTC ·
(8 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 170.168.97.143 (ES/Spain/-): 1 in the last 3600 secs (0-197)
Hacking
🇩🇪
stinpriza
2026-03-04 11:58:19
UTC ·
(8 months ago)
Web App Attack
Web App Attack
🇫🇷
masterguru
2026-03-03 02:30:31
UTC ·
(8 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 170.168.97.143 (ES/Spain/-): 1 in the last 3600 secs (0-193)
Hacking
🇮🇹
VHosting
2026-01-27 00:00:28
UTC ·
(9 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
