|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:47:11.184558 2026] [security2:error] [pid 19092:tid 19092] [client 157.22.100.123:40811] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:47:11.184558 2026] [security2:error] [pid 19092:tid 19092] [client 157.22.100.123:40811] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||geriterry.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "geriterry.com"] [uri "/"] [unique_id "au_Gj0EApCnpQbJXE3hCjQAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:52:49.243658 2026] [security2:error] [pid 6743:tid 6743] [client 157.22.100.123:45251] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:52:49.243658 2026] [security2:error] [pid 6743:tid 6743] [client 157.22.100.123:45251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ideaofauniversity.website|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ideaofauniversity.website"] [uri "/academic-flourishing-the-practical-idea/study-techniques/academic-distractions/"] [unique_id "au-50TYzxtkEUyxug3iSkgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
SSH tarpit (endlessh) connection from 157.22.100.123
|
Brute-Force
SSH
|
|
Anonymous
|
|
SSH tarpit (endlessh) connection from 157.22.100.123
|
Brute-Force
SSH
|
|
🇺🇸
nationaleventpros.com
|
|
WordPress login attempt
|
Brute-Force
|
|
🇺🇸
kosada.com
|
|
Web password guessing
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 00:23:30.127818 2026] [security2:error] [pid 19940:tid 19940] [client 157.22.100.123:41505] ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 00:23:30.127818 2026] [security2:error] [pid 19940:tid 19940] [client 157.22.100.123:41505] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aim-controls.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aim-controls.com"] [uri "/wp-json/wp/v2/users"] [unique_id "an_pwrK6cJI0_VAfUWne2AAAAAI"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
C C
|
|
Distributed scraping attack: 1244 req from 1212 rotating proxy IPs | this IP: 1 req
|
Open Proxy
Bad Web Bot
Exploited Host
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 03:18:40.191844 2026] [security2:error] [pid 98852:tid 98852] [client 157.22.100.123:42721] ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 03:18:40.191844 2026] [security2:error] [pid 98852:tid 98852] [client 157.22.100.123:42721] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||salsberggroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "salsberggroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "am7vUMppKuhpiIMEXOtB4AAAAAI"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 23:16:03.971948 2026] [security2:error] [pid 1391053:tid 1391053] [client 157.22.100.123:28 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 23:16:03.971948 2026] [security2:error] [pid 1391053:tid 1391053] [client 157.22.100.123:28821] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oceansgift.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oceansgift.com"] [uri "/wp-json/wp/v2/users"] [unique_id "am1k88ieA-dRQHW19OLMzgAAAAQ"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 12:32:48.704610 2026] [security2:error] [pid 2657591:tid 2657591] [client 157.22.100.123:55 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 12:32:48.704610 2026] [security2:error] [pid 2657591:tid 2657591] [client 157.22.100.123:55193] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dwightbrown.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dwightbrown.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amzOMJ-NTLB05eQ1ZXGQ_wAAABQ"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:35:41.937216 2026] [security2:error] [pid 3590857:tid 3590857] [client 157.22.100.123:31 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:35:41.937216 2026] [security2:error] [pid 3590857:tid 3590857] [client 157.22.100.123:31551] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aliciagrant.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aliciagrant.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amdQnQ71lje27YUk5qZsSQAAAAc"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇪
voormedia
|
|
Accessed trap at '/xmlrpc.php'
|
Web App Attack
|
|
🇳🇿
Tripwire
|
|
Probing for Wordpress - /wp-login.php
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 02:52:19.968779 2026] [security2:error] [pid 4760:tid 4760] [client 157.22.100.123:10487] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.100.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 02:52:19.968779 2026] [security2:error] [pid 4760:tid 4760] [client 157.22.100.123:10487] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nexthop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nexthop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alx0I08hTcGVf4sLnXAuNgAAAAQ"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
