🇺🇸
TPI-Abuse
2026-11-12 18:15:51
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:15:46.327704 2026] [security2:error] [pid 12338:tid 12338] [client 157.22.17.230:31151] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:15:46.327704 2026] [security2:error] [pid 12338:tid 12338] [client 157.22.17.230:31151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||web.cruisingforsex.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "web.cruisingforsex.com"] [uri "/bb/thailand/"] [unique_id "avYCUoiHrmPG1ff5tWcTcgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 06:56:06
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:56:03.314427 2026] [security2:error] [pid 11596:tid 11596] [client 157.22.17.230:31087] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:56:03.314427 2026] [security2:error] [pid 11596:tid 11596] [client 157.22.17.230:31087] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thebeeplace.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thebeeplace.com"] [uri "/help/bee-safety/"] [unique_id "avFugwb0xGqCvs3AaGyuIwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 11:53:12
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:53:08.379407 2026] [security2:error] [pid 5378:tid 5378] [client 157.22.17.230:50729] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:53:08.379407 2026] [security2:error] [pid 5378:tid 5378] [client 157.22.17.230:50729] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||corchard.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "corchard.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajKKpA0paqC2NcUQZ5y-sgAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 16:09:49
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-04 20:07:25
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 16:07:18.154267 2026] [security2:error] [pid 29755:tid 29755] [client 157.22.17.230:38839] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 16:07:18.154267 2026] [security2:error] [pid 29755:tid 29755] [client 157.22.17.230:38839] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jbowerslaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jbowerslaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiHa9sgHFw5kbxzInYo8QgAAAC8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 06:20:50
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 02:20:46.287820 2026] [security2:error] [pid 32369:tid 32369] [client 157.22.17.230:50171] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 02:20:46.287820 2026] [security2:error] [pid 32369:tid 32369] [client 157.22.17.230:50171] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||soereng.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "soereng.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag1SvombK97A06TWH0Qx0wAAACg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-25 11:29:53
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 07:29:49.823720 2026] [security2:error] [pid 8812:tid 8812] [client 157.22.17.230:27469] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 07:29:49.823720 2026] [security2:error] [pid 8812:tid 8812] [client 157.22.17.230:27469] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cruisingforsex.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cruisingforsex.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aeylraFgar4DjMGUDthVcAAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
WeekendWeb
2026-04-18 04:47:01
UTC ·
(6 months ago)
Wordpress Vunerability attack
Web App Attack
🇺🇸
TPI-Abuse
2026-04-17 18:35:46
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 14:35:41.211975 2026] [security2:error] [pid 15426:tid 15426] [client 157.22.17.230:50937] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 14:35:41.211975 2026] [security2:error] [pid 15426:tid 15426] [client 157.22.17.230:50937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tduniverse.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tduniverse.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aeJ9fVkObIZJbKzQpeL-dwAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 00:18:11
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 20:18:05.552536 2026] [security2:error] [pid 3005266:tid 3005266] [client 157.22.17.230:5893 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 14 20:18:05.552536 2026] [security2:error] [pid 3005266:tid 3005266] [client 157.22.17.230:58937] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gp-cm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gp-cm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad7ZPRYs--cZIqWAO5pf7AAAABM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-03-27 05:32:32
UTC ·
(7 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/-
Web App Attack
🇺🇸
TPI-Abuse
2026-03-26 06:38:07
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 02:38:01.629708 2026] [security2:error] [pid 18824:tid 18824] [client 157.22.17.230:42915] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.17.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 02:38:01.629708 2026] [security2:error] [pid 18824:tid 18824] [client 157.22.17.230:42915] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rogerandcarol.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rogerandcarol.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acTUSbxkxpGkNJq84HuISwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-21 15:13:29
UTC ·
(7 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇬🇧
Steve
2026-01-14 21:20:22
UTC ·
(10 months ago)
Repeated attempts against wordpress site
Brute-Force
Web App Attack
