🇺🇸
TPI-Abuse
2026-11-14 06:55:06
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:55:00.595842 2026] [security2:error] [pid 7755:tid 7755] [client 157.22.18.34:59955] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:55:00.595842 2026] [security2:error] [pid 7755:tid 7755] [client 157.22.18.34:59955] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gamepart.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gamepart.com"] [uri "/product/item/fly_101.html"] [unique_id "avgFxFRK5Pdel4KAbusz5wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:23:22
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:23:17.901557 2026] [security2:error] [pid 16819:tid 16819] [client 157.22.18.34:64171] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:23:17.901557 2026] [security2:error] [pid 16819:tid 16819] [client 157.22.18.34:64171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.whoore.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.whoore.com"] [uri "/2011/08/17"] [unique_id "avVbVZeaD_lCzFRCl5pl3AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 15:54:10
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:54:05.434099 2026] [security2:error] [pid 9621:tid 9621] [client 157.22.18.34:40645] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:54:05.434099 2026] [security2:error] [pid 9621:tid 9621] [client 157.22.18.34:40645] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.sailyourkayak.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sailyourkayak.com"] [uri "/cdn-cgi/l/email-protection/"] [unique_id "avHsnZTgAoI2N4mFwjdBqAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 10:29:24
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:29:20.850541 2026] [security2:error] [pid 30714:tid 30714] [client 157.22.18.34:9333] ModS ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 05:29:20.850541 2026] [security2:error] [pid 30714:tid 30714] [client 157.22.18.34:9333] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/stats/statistic124.html"] [unique_id "au79gBF71c1vaR20nkTLvwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 18:28:49
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:28:45.015056 2026] [security2:error] [pid 17874:tid 17874] [client 157.22.18.34:14475] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:28:45.015056 2026] [security2:error] [pid 17874:tid 17874] [client 157.22.18.34:14475] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Zien, James David obit 2001.htm"] [unique_id "aujWXT0Cz92FhA5JKAGuuwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 15:50:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 11:50:33.267625 2026] [security2:error] [pid 22004:tid 22004] [client 157.22.18.34:14169] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 11:50:33.267625 2026] [security2:error] [pid 22004:tid 22004] [client 157.22.18.34:14169] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.henhousebbq.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.henhousebbq.com"] [uri "/"] [unique_id "auYOSSxnQ23hD4x5btjcbAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-15 13:25:04
UTC ·
(1 month ago)
WordPress login attempt
Brute-Force
🇩🇪
FeG Deutschland
2026-09-14 19:00:19
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇺🇸
www.winos.me
2026-08-28 03:11:12
UTC ·
(2 months ago)
Scanning for sensitive files/paths: /wp-login.php
Hacking
Web App Attack
🇮🇹
mgarofano80
2026-08-26 03:29:51
UTC ·
(2 months ago)
Brute-Force
Web App Attack
🇩🇪
Blexyel
2026-08-04 01:51:45
UTC ·
(3 months ago)
157.22.18.34 - - [04/Aug/2026:03:51:45 +0200] "GET /.git/info/exclude HTTP/1.1" 200 240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" "pingusmc.org"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 09:01:07
UTC ·
(3 months ago)
(mod_security) mod_security (id:211030) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:01:03.176223 2026] [security2:error] [pid 119931:tid 119931] [client 157.22.18.34:45945] M ...
show more
(mod_security) mod_security (id:211030) triggered by 157.22.18.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:01:03.176223 2026] [security2:error] [pid 119931:tid 119931] [client 157.22.18.34:45945] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||powerkiteforum.com|F|2"] [data "Matched Data: ('~'||( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "powerkiteforum.com"] [uri "/search.php"] [unique_id "al81T-bfcG7vMLIg_oebJAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack