🇺🇸
TPI-Abuse
2026-11-12 20:29:58
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 15:29:54.257622 2026] [security2:error] [pid 14878:tid 14878] [client 157.22.19.181:9435] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 15:29:54.257622 2026] [security2:error] [pid 14878:tid 14878] [client 157.22.19.181:9435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/reviews/retribution-movie-review/"] [unique_id "avYhwgVFmc18UYYNTJ5l_wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 04:45:01
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:44:54.178490 2026] [security2:error] [pid 12689:tid 12689] [client 157.22.19.181:28915] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 23:44:54.178490 2026] [security2:error] [pid 12689:tid 12689] [client 157.22.19.181:28915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.scoutinsignia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.scoutinsignia.com"] [uri "/swimguys.htm"] [unique_id "avVERnU5yJoP-La9I5yVWAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:41:28
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:41:22.517688 2026] [security2:error] [pid 17628:tid 17628] [client 157.22.19.181:11549] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:41:22.517688 2026] [security2:error] [pid 17628:tid 17628] [client 157.22.19.181:11549] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.recetabook.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.recetabook.com"] [uri "/buscador-gingerbread.php"] [unique_id "avKugkQB-kiIBq7NINxo-QAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 03:19:36
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:19:31.748842 2026] [security2:error] [pid 9841:tid 9855] [client 157.22.19.181:57299] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 22:19:31.748842 2026] [security2:error] [pid 9841:tid 9855] [client 157.22.19.181:57299] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tkfay.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tkfay.com"] [uri "/services/customer-service/"] [unique_id "avE7w1dHQX51gMa6HjnmYAAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:29:28
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:29:22.716714 2026] [security2:error] [pid 443180:tid 443201] [client 157.22.19.181:63637] ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:29:22.716714 2026] [security2:error] [pid 443180:tid 443201] [client 157.22.19.181:63637] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.aafmgcc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.aafmgcc.com"] [uri "/about-gafm.html"] [unique_id "avCjYl_iHetNOJL4PHDJoAAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-04 20:03:55
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-03 12:55:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:55:28.076848 2026] [security2:error] [pid 8830:tid 8830] [client 157.22.19.181:54457] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 07:55:28.076848 2026] [security2:error] [pid 8830:tid 8830] [client 157.22.19.181:54457] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2014/03/17/a-really-long-post-about-don-delillo-which-mentions-2014-books-17-and-18-mao-ii-and-point-omega/"] [unique_id "aunZwBKcisgqDuyM1yZM6wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 06:53:59
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:53:53.800733 2026] [security2:error] [pid 28049:tid 28049] [client 157.22.19.181:21545] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:53:53.800733 2026] [security2:error] [pid 28049:tid 28049] [client 157.22.19.181:21545] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/1329"] [unique_id "aumFAa8Cn459qcH-Uqy-OAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 03:54:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 23:54:44.423211 2026] [security2:error] [pid 27691:tid 27691] [client 157.22.19.181:19913] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 23:54:44.423211 2026] [security2:error] [pid 27691:tid 27691] [client 157.22.19.181:19913] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/bonfire.html"] [unique_id "aua4BDudZ91kDO6MyB4xKAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:28:25
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:28:18.756585 2026] [security2:error] [pid 9230:tid 9230] [client 157.22.19.181:50381] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.19.181 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:28:18.756585 2026] [security2:error] [pid 9230:tid 9230] [client 157.22.19.181:50381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thelittleprince.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thelittleprince.net"] [uri "/rdkpressrelease3.htm"] [unique_id "atDU8mKJHshcN1PJTKqhFwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-10 23:58:56
UTC ·
(5 months ago)
Try to access /xmlrpc.php
Web App Attack
2026-06-10 00:07:44
UTC ·
(5 months ago)
WordPress Brute Force
Brute-Force
🇺🇸
TRoden
2026-05-15 04:46:49
UTC ·
(5 months ago)
Geo Block Plugin: Escalation flag(s): rce_attempt
Hacking
🇺🇸
oralunal
2026-04-22 12:11:40
UTC ·
(6 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-04-17 11:33:37
UTC ·
(6 months ago)
WordPress login attempt
Brute-Force
