🇺🇸
TPI-Abuse
2026-11-15 09:08:46
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:08:38.875683 2026] [security2:error] [pid 2423840:tid 2423840] [client 157.22.17.157:3953 ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:08:38.875683 2026] [security2:error] [pid 2423840:tid 2423840] [client 157.22.17.157:39537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.timelord2067.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.timelord2067.com"] [uri "/forums/index.php"] [unique_id "avl2lhIdtvjN7GViXSZrngAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 09:35:22
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:35:18.877702 2026] [security2:error] [pid 13315:tid 13315] [client 157.22.17.157:36137] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:35:18.877702 2026] [security2:error] [pid 13315:tid 13315] [client 157.22.17.157:36137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishleadership.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishleadership.org"] [uri "/feed/"] [unique_id "avQ21hUMxhNTXshcbjIIDQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:38:11
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:38:02.721599 2026] [security2:error] [pid 13218:tid 13218] [client 157.22.17.157:17049] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:38:02.721599 2026] [security2:error] [pid 13218:tid 13218] [client 157.22.17.157:17049] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.paleopathologist.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.paleopathologist.com"] [uri "/diet/sweet-poison-what-is-it-about-glucose/"] [unique_id "avF4Wifu9_gP_fjpUh03OwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 20:21:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:21:16.170699 2026] [security2:error] [pid 12923:tid 12947] [client 157.22.17.157:20297] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:21:16.170699 2026] [security2:error] [pid 12923:tid 12947] [client 157.22.17.157:20297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishrapper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishrapper.com"] [uri "/fishing-articles/devils-lake-percheyes-feldner.html"] [unique_id "au-IPJT_IvrFpM0Yhl0NdwAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 02:37:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:37:35.996249 2026] [security2:error] [pid 1732:tid 1732] [client 157.22.17.157:54813] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 22:37:35.996249 2026] [security2:error] [pid 1732:tid 1732] [client 157.22.17.157:54813] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vjrott.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vjrott.com"] [uri "/gea-bern.ch"] [unique_id "auQC722IKCNrWEJU-IRxnAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-27 23:27:00
UTC ·
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
NewGastroline
2026-10-22 19:43:43
UTC ·
(3 weeks ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
2026-10-18 18:06:38
UTC ·
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-06-24 21:23:22
UTC ·
(4 months ago)
IM360 WAF: SQL Injection via WordPress Link functionality MV:2 AND AND/**/(SELECT/**/9359/**/FROM(SELECT/**/COUNT(*),CONCAT('~',(SELECT/**/(ELT(9359=9359,1))),'~',FLOOR(RAND(0)*2))x/**/FROM/**/INFORMATION_SCHEMA.PLUGINS/**/GROUP/**/BY/**/x)a)-- -
SQL Injection
🇩🇪
london2038.com
2026-05-08 05:25:56
UTC ·
(6 months ago)
Malformed or malicious web request
157.22.17.157 - - [08/May/2026:07:25:52 +0200] "GET /index.php?redirect=no&title=The_Broker%27+AND+AND%2F%2A%2A%2F6971%3DCAST%28%27~%27%7C%7C%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F%286971%3D6971%29% ...
show more
Malformed or malicious web request
157.22.17.157 - - [08/May/2026:07:25:52 +0200] "GET /index.php?redirect=no&title=The_Broker%27+AND+AND%2F%2A%2A%2F6971%3DCAST%28%27~%27%7C%7C%28SELECT%2F%2A%2A%2F%28CASE%2F%2A%2A%2FWHEN%2F%2A%2A%2F%286971%3D6971%29%2F%2A%2A%2FTHEN%2F%2A%2A%2F1%2F%2A%2A%2FELSE%2F%2A%2A%2F0%2F%2A%2A%2FEND%29%29%3A%3Atext%7C%7C%27~%27%2F%2A%2A%2FAS%2F%2A%2A%2FNUMERIC%29--+- HTTP/1.1" 400 9332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Hacking
Web App Attack
