🇺🇸
TPI-Abuse
2026-11-15 22:04:29
UTC ·
(27 minutes ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:04:25.945775 2026] [security2:error] [pid 19449:tid 19449] [client 157.22.102.131:44299] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:04:25.945775 2026] [security2:error] [pid 19449:tid 19449] [client 157.22.102.131:44299] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.musicrolls.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.musicrolls.com"] [uri "/midi/bogieman.mid"] [unique_id "avosaQcyphlLkwu8bzPbvAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:28:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:28:15.834414 2026] [security2:error] [pid 27083:tid 27083] [client 157.22.102.131:32291] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:28:15.834414 2026] [security2:error] [pid 27083:tid 27083] [client 157.22.102.131:32291] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||phuket-boatcharter.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "phuket-boatcharter.com"] [uri "/phuket-private-daytrip-kuxury-speedboat-sabi375-rapture-solarium.htm"] [unique_id "au-X7wRPfKhH9vdRN5UxtAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-06 01:39:20
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 00:32:48
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:32:40.234264 2026] [security2:error] [pid 14328:tid 14328] [client 157.22.102.131:41535] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 20:32:40.234264 2026] [security2:error] [pid 14328:tid 14328] [client 157.22.102.131:41535] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thedreamcatchers.eu|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thedreamcatchers.eu"] [uri "/"] [unique_id "auPlqLbwz30V9Vnj00PELAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:52:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:52:30.025878 2026] [security2:error] [pid 16242:tid 16242] [client 157.22.102.131:49537] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:52:30.025878 2026] [security2:error] [pid 16242:tid 16242] [client 157.22.102.131:49537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/friends/mila/index.html"] [unique_id "auN5zjzsJLDGHk9zVO73ogAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 12:26:38
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:26:33.572012 2026] [security2:error] [pid 20720:tid 20720] [client 157.22.102.131:53741] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 08:26:33.572012 2026] [security2:error] [pid 20720:tid 20720] [client 157.22.102.131:53741] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.montgomeryhistoricalsociety.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.montgomeryhistoricalsociety.org"] [uri "/mhsbylaw.htm"] [unique_id "auM7edyupz-Mm06Bt2_HDAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:45:08
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:45:04.714189 2026] [security2:error] [pid 11704:tid 11704] [client 157.22.102.131:25355] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:45:04.714189 2026] [security2:error] [pid 11704:tid 11704] [client 157.22.102.131:25355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||powerlinemagazine.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "powerlinemagazine.com"] [uri "/april_may_2015_page24.htm"] [unique_id "auJs4N65pYdwgN3ZiyCwnQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-10-27 23:24:23
UTC ·
(2 weeks ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -69.397 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Sa
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-20 11:35:52
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:35:44.397986 2026] [security2:error] [pid 28019:tid 28019] [client 157.22.102.131:15511] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:35:44.397986 2026] [security2:error] [pid 28019:tid 28019] [client 157.22.102.131:15511] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.revelatorium.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.revelatorium.com"] [uri "/"] [unique_id "atdSEFafx99gC2wVu8WExQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:33:27
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:33:15.084917 2026] [security2:error] [pid 27300:tid 27318] [client 157.22.102.131:27731] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.102.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:33:15.084917 2026] [security2:error] [pid 27300:tid 27318] [client 157.22.102.131:27731] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.annybelle.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.annybelle.org"] [uri "/why_abf.html"] [unique_id "atDWG_3nOJWCLjyd36Ke5AAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:56
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
