🇺🇸
TPI-Abuse
2026-11-10 01:21:37
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:21:32.006159 2026] [security2:error] [pid 17458:tid 17458] [client 157.22.19.147:22173] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:21:32.006159 2026] [security2:error] [pid 17458:tid 17458] [client 157.22.19.147:22173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/recipes/desserts/carrot-cake/"] [unique_id "avJxmwepfjRv9wr2VTgjGQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:05:48
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:05:44.485011 2026] [security2:error] [pid 27156:tid 27156] [client 157.22.19.147:10663] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:05:44.485011 2026] [security2:error] [pid 27156:tid 27156] [client 157.22.19.147:10663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||greatchristianadventure.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greatchristianadventure.com"] [uri "/2020/03/24/gods-escape-plan/"] [unique_id "avCr6FkBu4kmhPAR5BRlXQAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:30:16
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:30:12.348685 2026] [security2:error] [pid 15263:tid 15263] [client 157.22.19.147:41117] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:30:12.348685 2026] [security2:error] [pid 15263:tid 15263] [client 157.22.19.147:41117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bikinipageone.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bikinipageone.com"] [uri "/ph05/m186/04.htm"] [unique_id "au_61LhywXcpjOZQqqSkUgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:46:49
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:46:43.865851 2026] [security2:error] [pid 1373:tid 1373] [client 157.22.19.147:57011] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:46:43.865851 2026] [security2:error] [pid 1373:tid 1373] [client 157.22.19.147:57011] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/speaker/adelante-mujeres-update/"] [unique_id "au4Ec0BveY7RnIq5YmLWvwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-05 01:44:58
UTC ·
(5 days ago)
Web App Attack
Web App Attack
🇩🇪
keep_out
2026-10-25 05:39:31
UTC ·
(2 weeks ago)
Probing\(5\) HTTP Ports
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 01:36:24
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 21:36:16.695580 2026] [security2:error] [pid 1557:tid 1557] [client 157.22.19.147:12009] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 21:36:16.695580 2026] [security2:error] [pid 1557:tid 1557] [client 157.22.19.147:12009] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.glendaleheritage.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glendaleheritage.org"] [uri "/glendale/eva-lee-matthews/"] [unique_id "at1dEB7QA1V1en19dKHY8QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-19 04:08:22
UTC ·
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇷🇺
cnaize
2026-10-16 19:35:30
UTC ·
(3 weeks ago)
Malicious activity blocked by Meds firewall
Port Scan
🇩🇪
LRob
2026-10-14 13:37:09
UTC ·
(3 weeks ago)
Not following 301 redirects — wasted requests | method: GET, HEAD | path: /__wp_probe_lauren_does_not_exist.php, /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36, Mozi ...
show more
Not following 301 redirects — wasted requests | method: GET, HEAD | path: /__wp_probe_lauren_does_not_exist.php, /wp-login.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
show less
Bad Web Bot
2026-10-10 08:26:47
UTC ·
(1 month ago)
2026-10-10T10:26:46.515751+02:00 polaris wp(sahpa.co.za)[106332]: Blocked authentication attempt for
[email protected] from 157.22.19.147
...
Brute-Force
Web App Attack
🇮🇹
mgarofano80
2026-08-26 02:20:44
UTC ·
(2 months ago)
Brute-Force
Web App Attack
2026-08-02 12:20:04
UTC ·
(3 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
2025-12-27 11:20:45
UTC ·
(10 months ago)
"GET /wp-login.php HTTP/1.1"
Hacking
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-10 14:34:34
UTC ·
(11 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
