🇺🇸
TPI-Abuse
2026-11-15 23:03:33
UTC ·
(9 minutes ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 18:03:29.331696 2026] [security2:error] [pid 334:tid 334] [client 157.22.18.12:37021] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 18:03:29.331696 2026] [security2:error] [pid 334:tid 334] [client 157.22.18.12:37021] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.grupo-visalud.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.grupo-visalud.com"] [uri "/2024/06/why-you-should-give-consideration-to-dating-women-who-want-to-fuck/"] [unique_id "avo6QZqNZC8b_Tk-4QFJyQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 16:04:09
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:04:03.909068 2026] [security2:error] [pid 5539:tid 5539] [client 157.22.18.12:63725] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:04:03.909068 2026] [security2:error] [pid 5539:tid 5539] [client 157.22.18.12:63725] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/09/16/5-reasons-im-supporting-martha-coakley-after-the-primary/"] [unique_id "aviGc6S8YE5Dr_JMumk4iQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:50:17
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:50:11.716408 2026] [security2:error] [pid 14694:tid 14694] [client 157.22.18.12:63719] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:50:11.716408 2026] [security2:error] [pid 14694:tid 14694] [client 157.22.18.12:63719] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tobyjohnson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tobyjohnson.com"] [uri "/review-duncan-occams-razor.html"] [unique_id "avGlYyBpJeimNJIaYfazjQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 07:17:48
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:17:44.018461 2026] [security2:error] [pid 26828:tid 26828] [client 157.22.18.12:20299] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:17:44.018461 2026] [security2:error] [pid 26828:tid 26828] [client 157.22.18.12:20299] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/Stressless-Chair/Stressless-Live-Paloma-Copper-Leather-Recliner-Chair.htm"] [unique_id "au1_GKlqIiIWx1DvWy1MBgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:38:02
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:37:54.611545 2026] [security2:error] [pid 14007:tid 14007] [client 157.22.18.12:14277] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.12 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:37:54.611545 2026] [security2:error] [pid 14007:tid 14007] [client 157.22.18.12:14277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/cyber-warfare/"] [unique_id "auSBkkmAnH3Ts9sf09SvfQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-13 01:50:07
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.18.12
2026-09-13T03:10:02+02:00 vpn Access-Reject '1210422' station: 157.22.18.12 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.18.12
2026-09-13T03:10:02+02:00 vpn Access-Reject '1210422' station: 157.22.18.12 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇳🇱
i-turnradio.nl
2026-04-14 18:46:09
UTC ·
(7 months ago)
2026-04-14 @ 20:46:09 (CET) ~ Blocked for trying to access: /erker/wp/wp-login.php
Web App Attack
🇩🇪
grassau.com
2026-04-13 00:32:59
UTC ·
(7 months ago)
(wordpress) Failed wordpress login from 157.22.18.12 (SC/Seychelles/-/-/-)
Brute-Force
🇨🇿
ptlab
2026-04-07 22:45:41
UTC ·
(7 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇺🇸
octageeks.com
2026-03-22 04:06:16
UTC ·
(7 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇩🇪
LRob
2026-03-19 22:00:12
UTC ·
(7 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-03-19 19:27:04
UTC ·
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇺🇸
myagent.site
2026-03-18 19:02:03
UTC ·
(7 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
