🇺🇸
TPI-Abuse
2026-11-11 16:41:24
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:41:17.581884 2026] [security2:error] [pid 17620:tid 17620] [client 157.22.125.71:16263] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:41:17.581884 2026] [security2:error] [pid 17620:tid 17620] [client 157.22.125.71:16263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/shop-online/"] [unique_id "avSarW1jwO5YsiRoIlV22QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:45:18
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:45:10.869661 2026] [security2:error] [pid 10504:tid 10504] [client 157.22.125.71:10591] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:45:10.869661 2026] [security2:error] [pid 10504:tid 10504] [client 157.22.125.71:10591] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rcjlawfirm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rcjlawfirm.com"] [uri "/1/post/2023/07/why-you-need-a-lawyer-for-an-estate-plan.html"] [unique_id "avHAVu7QwM6nmwAiCXGNjAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 02:39:38
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:39:34.726908 2026] [security2:error] [pid 7710:tid 7710] [client 157.22.125.71:38267] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 21:39:34.726908 2026] [security2:error] [pid 7710:tid 7710] [client 157.22.125.71:38267] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dwightbrown.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dwightbrown.com"] [uri "/keep-calm-carry-on-rug/"] [unique_id "avEyZozzUfustFF9pEtkmAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-02 02:14:45
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇬🇷
setupgr
2026-08-02 15:13:48
UTC ·
(3 months ago)
(wplogin_block) Blocked WP-Login Access Attempt 157.22.125.71 (PL/Poland/Mazovia/Warsaw/-/[AS213954 -Reserved AS-]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 157.22.125.71 - - [02/Aug/2026:18:12:53 +0300] ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 157.22.125.71 (PL/Poland/Mazovia/Warsaw/-/[AS213954 -Reserved AS-]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 157.22.125.71 - - [02/Aug/2026:18:12:53 +0300] "POST /wp-login.php HTTP/1.1" 200 10612 "https://asteriassantorini.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Port Scan
🇬🇧
consul.to
2026-04-21 18:10:20
UTC ·
(6 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-03-25 13:55:38
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 09:55:33.745338 2026] [security2:error] [pid 11180:tid 11180] [client 157.22.125.71:31847] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.125.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 09:55:33.745338 2026] [security2:error] [pid 11180:tid 11180] [client 157.22.125.71:31847] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||armadillosigns.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "armadillosigns.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acPpVX-CcoRvb_r5hGaOrgAAAAQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-03-16 18:01:41
UTC ·
(7 months ago)
Blocked user enumeration attempt
Hacking
