🇺🇸
TPI-Abuse
2026-11-15 21:30:28
UTC ·
(14 minutes ago)
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:30:24.132313 2026] [security2:error] [pid 22267:tid 22267] [client 170.168.99.173:53747] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:30:24.132313 2026] [security2:error] [pid 22267:tid 22267] [client 170.168.99.173:53747] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avokcCy8rpyE5XToKspf2AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:29:14
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:29:06.636739 2026] [security2:error] [pid 12722:tid 12758] [client 170.168.99.173:57783] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:29:06.636739 2026] [security2:error] [pid 12722:tid 12758] [client 170.168.99.173:57783] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/ulikewisenessa3389485"] [unique_id "avKBckDHnCApXwALFiJC5QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-11-08 07:31:12
UTC ·
(1 week ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.457 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Sa
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-05 05:45:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:44:57.850956 2026] [security2:error] [pid 18369:tid 18369] [client 170.168.99.173:30689] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:44:57.850956 2026] [security2:error] [pid 18369:tid 18369] [client 170.168.99.173:30689] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/posts/4419"] [unique_id "auwX2RrwHFyfqtv2rjhrVwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 13:29:48
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:29:39.582909 2026] [security2:error] [pid 19422:tid 19422] [client 170.168.99.173:39329] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 09:29:39.582909 2026] [security2:error] [pid 19422:tid 19422] [client 170.168.99.173:39329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||socialstudiesforkids.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "socialstudiesforkids.com"] [uri "/subjects/currentevents.htm"] [unique_id "auNKQ2EADsSa_dbJ55v8KQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-10-23 14:10:28
UTC ·
(3 weeks ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.457 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Sa
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-16 16:17:56
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:17:51.297503 2026] [security2:error] [pid 25482:tid 25482] [client 170.168.99.173:38345] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.99.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:17:51.297503 2026] [security2:error] [pid 25482:tid 25482] [client 170.168.99.173:38345] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||blogs.melton.space|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blogs.melton.space"] [uri "/pharisee/index.php/tag/galatians-522/"] [unique_id "atJOL858Ea9CTaD6aC18UQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-13 20:13:09
UTC ·
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
2026-09-23 21:46:34
UTC ·
(1 month ago)
Multiple failed login attemps RDS-Web-Access-Server
Brute-Force
Web App Attack
🇪🇸
librebit
2026-09-22 01:02:08
UTC ·
(1 month ago)
Brute force
Brute-Force
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 10:50:41
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 170.168.99.173
2026-09-10T12:12:11+02:00 vpn Access-Reject 'Rex' station: 170.168.99.173 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 170.168.99.173
2026-09-10T12:12:11+02:00 vpn Access-Reject 'Rex' station: 170.168.99.173 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-09 16:50:35
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 170.168.99.173
2026-09-09T18:18:18+02:00 vpn Access-Reject '[email protected] ' station: 170.168.99.173 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 170.168.99.173
2026-09-09T18:18:18+02:00 vpn Access-Reject '[email protected] ' station: 170.168.99.173 auth-type: - realm: DEFAULT nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇪🇸
librebit
2026-09-09 11:00:52
UTC ·
(2 months ago)
Brute force
Brute-Force
🇨🇿
lp
2026-09-09 03:21:45
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 170.168.99.173
2026-09-09T04:42:13+02:00 vpn Access-Reject 'kftk' station: 170.168.99.173 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 170.168.99.173
2026-09-09T04:42:13+02:00 vpn Access-Reject 'kftk' station: 170.168.99.173 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-09T04:43:37+02:00 vpn Access-Reject 'communications' station: 170.168.99.173 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
