🇺🇸
TPI-Abuse
2026-11-08 06:35:09
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:35:04.980393 2026] [security2:error] [pid 3524857:tid 3524908] [client 157.22.16.35:43363] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 01:35:04.980393 2026] [security2:error] [pid 3524857:tid 3524908] [client 157.22.16.35:43363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||delapiazza.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "delapiazza.com"] [uri "/view-all-designer-fabric-bags/reusable-shopping-bag-made-with-designer-fabric-5"] [unique_id "avAYGKG4nPl-bMrFlF9jkwAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 01:55:13
UTC ·
(4 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:16:47
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:16:41.223401 2026] [security2:error] [pid 31492:tid 31492] [client 157.22.16.35:21347] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:16:41.223401 2026] [security2:error] [pid 31492:tid 31492] [client 157.22.16.35:21347] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.loneoakhoney.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.loneoakhoney.com"] [uri "/lone-oak-honey-company-all-natural-beeswax-lotion-stick/"] [unique_id "aulSGVGwaOOCgTpgCjVCsQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 15:13:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 11:13:50.494703 2026] [security2:error] [pid 6639:tid 6656] [client 157.22.16.35:36747] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 11:13:50.494703 2026] [security2:error] [pid 6639:tid 6656] [client 157.22.16.35:36747] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||triestemagica.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "triestemagica.org"] [uri "/robots.txt"] [unique_id "auS0Lg4I6FwQksD7m946hAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 14:17:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 10:17:50.221536 2026] [security2:error] [pid 29633:tid 29633] [client 157.22.16.35:44399] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.16.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 10:17:50.221536 2026] [security2:error] [pid 29633:tid 29633] [client 157.22.16.35:44399] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/test/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/df0a81f6e014c87086256bf9006100ed"] [unique_id "auNVjqiQRiu6ZZfVPTCuFgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 08:32:02
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 08:32:02
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇦
URAN Publishing Service
2026-09-10 20:06:34
UTC ·
(1 month ago)
[10/Sep/2026:23:06:34 +0300] -- 157.22.16.35 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-02 07:08:45
UTC ·
(2 months ago)
[02/Sep/2026:10:08:44 +0300] -- 157.22.16.35 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-01 10:21:04
UTC ·
(2 months ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇦🇺
Bay13
2026-09-01 08:20:13
UTC ·
(2 months ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 13:06:08
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
