🇺🇸
TPI-Abuse
2026-11-10 11:06:16
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:06:11.635235 2026] [security2:error] [pid 28745:tid 28745] [client 157.22.19.112:43127] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:06:11.635235 2026] [security2:error] [pid 28745:tid 28745] [client 157.22.19.112:43127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||marxistphilosophy.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "marxistphilosophy.org"] [uri "/maozedong/mx1/039.htm"] [unique_id "avL6ow4gDb5kDBdXxdG5qQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-10 07:56:15
UTC ·
(8 hours ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-11-09 05:12:26
UTC ·
(1 day ago)
RDWeb scan
Web App Attack
2026-11-07 04:25:21
UTC ·
(3 days ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:19:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:19:15.972225 2026] [security2:error] [pid 10309:tid 10309] [client 157.22.19.112:62187] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:19:15.972225 2026] [security2:error] [pid 10309:tid 10309] [client 157.22.19.112:62187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tobyjohnson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tobyjohnson.com"] [uri "/review-clausen-not-the-son-he-expected.html"] [unique_id "aukog9rr97Hp8DJjoT13TAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 07:49:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:49:33.731520 2026] [security2:error] [pid 15505:tid 15505] [client 157.22.19.112:50151] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:49:33.731520 2026] [security2:error] [pid 15505:tid 15505] [client 157.22.19.112:50151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||blog.tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blog.tulsatvmemories.com"] [uri "/comment-guestbook/"] [unique_id "auWdjeBeIq2aG5F66Y0YJAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-30 21:42:52
UTC ·
(1 week ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-30 03:18:03
UTC ·
(1 week ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-29 02:16:29
UTC ·
(1 week ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-26 03:38:16
UTC ·
(2 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-24 16:32:22
UTC ·
(2 weeks ago)
RDWeb scan
Web App Attack
2026-10-23 19:54:51
UTC ·
(2 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-23 01:12:40
UTC ·
(2 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-22 01:04:55
UTC ·
(2 weeks ago)
RDWeb scan
Web App Attack
🇪🇸
librebit
2026-10-20 18:11:14
UTC ·
(2 weeks ago)
RDWeb scan
Web App Attack
