🇺🇸
TPI-Abuse
2026-10-27 15:36:45
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 11:36:40.895703 2026] [security2:error] [pid 13843:tid 13843] [client 157.22.124.60:47753] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 11:36:40.895703 2026] [security2:error] [pid 13843:tid 13843] [client 157.22.124.60:47753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||netguard.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "netguard.us"] [uri "/tips5_appendix.shtml"] [unique_id "auDFCGHB48Xl9xwuliGnzwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 21:52:13
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:52:08.914972 2026] [security2:error] [pid 23261:tid 23261] [client 157.22.124.60:26861] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:52:08.914972 2026] [security2:error] [pid 23261:tid 23261] [client 157.22.124.60:26861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/category/movies/page/27/"] [unique_id "atvXCBjnkNSWqy4pGCLjXQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agabeckov
2026-09-15 03:12:19
(1 month ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇨🇿
lp
2026-09-14 13:49:41
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.124.60
2026-09-14T15:20:06+02:00 vpn Access-Reject 'gbv-tgpg' station: 157.22.124.60 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.124.60
2026-09-14T15:20:06+02:00 vpn Access-Reject 'gbv-tgpg' station: 157.22.124.60 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-09-13 01:50:06
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.124.60
2026-09-13T02:31:52+02:00 vpn Access-Reject 'PS0206' station: 157.22.124.60 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.124.60
2026-09-13T02:31:52+02:00 vpn Access-Reject 'PS0206' station: 157.22.124.60 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 10:50:28
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.124.60
2026-09-10T11:48:38+02:00 vpn Access-Reject 'cfernandez' station: 157.22.124.60 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.124.60
2026-09-10T11:48:38+02:00 vpn Access-Reject 'cfernandez' station: 157.22.124.60 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 21:40:20
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-09 00:21:54
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:21:49.212772 2026] [security2:error] [pid 24312:tid 24312] [client 157.22.124.60:16629] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:21:49.212772 2026] [security2:error] [pid 24312:tid 24312] [client 157.22.124.60:16629] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fabandco.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fabandco.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aidcnUuspXhseEJ6HxNkOgAAAAw"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-18 02:39:22
(5 months ago)
[Firewall Canary] Temporary ban due to firewall rule match [URI:*/wp-login.php]
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 08:45:42
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 04:45:36.975584 2026] [security2:error] [pid 18126:tid 18126] [client 157.22.124.60:32739] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 04:45:36.975584 2026] [security2:error] [pid 18126:tid 18126] [client 157.22.124.60:32739] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||firstunitedreserve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users"] [unique_id "af70MNDLa59J_88K1ZIdmAAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-03 21:16:59
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 17:16:52.526856 2026] [security2:error] [pid 26111:tid 26111] [client 157.22.124.60:19057] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 17:16:52.526856 2026] [security2:error] [pid 26111:tid 26111] [client 157.22.124.60:19057] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||themediaplanet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "themediaplanet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afe7RHgfpZTzbXkx59YKDAAAACg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-02 21:20:44
(5 months ago)
PARMACOM WEBEXPLOIT 157.22.124.60 (157.22.124.60)
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 02:29:43
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 22:29:38.013972 2026] [security2:error] [pid 4774:tid 4774] [client 157.22.124.60:31489] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 22:29:38.013972 2026] [security2:error] [pid 4774:tid 4774] [client 157.22.124.60:31489] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sellitwithsteve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sellitwithsteve.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afK-ktKJYMYpZ2J70NhK7AAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-24 20:39:31
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 16:39:27.505591 2026] [security2:error] [pid 27708:tid 27708] [client 157.22.124.60:26099] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.124.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 24 16:39:27.505591 2026] [security2:error] [pid 27708:tid 27708] [client 157.22.124.60:26099] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||blackmanfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blackmanfamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aevU_8HC7JVQw4hPpcEuAgAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
