🇺🇸
TPI-Abuse
2026-11-13 05:46:40
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:46:33.922895 2026] [security2:error] [pid 7801:tid 7801] [client 157.22.44.21:51409] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:46:33.922895 2026] [security2:error] [pid 7801:tid 7801] [client 157.22.44.21:51409] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/2351-90-8.html"] [unique_id "avakOagLwnLSoQ1PrgHzGgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 09:44:16
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:44:11.972714 2026] [security2:error] [pid 24800:tid 24800] [client 157.22.44.21:18347] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:44:11.972714 2026] [security2:error] [pid 24800:tid 24800] [client 157.22.44.21:18347] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/Sailing-Plans/Sailing-Plans.html"] [unique_id "au2hawx1fGmzu7TSDe8q0gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:55:00
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:54:57.826552 2026] [security2:error] [pid 8475:tid 8475] [client 157.22.44.21:31491] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:54:57.826552 2026] [security2:error] [pid 8475:tid 8475] [client 157.22.44.21:31491] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/service/hope-for-the-holidays-is-a-success-for-2018/"] [unique_id "auu3wfw16pjVekHSKC8q5wAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:36:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:36:16.016459 2026] [security2:error] [pid 30718:tid 30718] [client 157.22.44.21:52585] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:36:16.016459 2026] [security2:error] [pid 30718:tid 30718] [client 157.22.44.21:52585] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ilikeabe.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ilikeabe.com"] [uri "/visit.html"] [unique_id "auuzYGmSAnysjIXJwchooQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:05:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:05:04.123459 2026] [security2:error] [pid 8337:tid 8337] [client 157.22.44.21:13713] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:05:04.123459 2026] [security2:error] [pid 8337:tid 8337] [client 157.22.44.21:13713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.eta-mct.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.eta-mct.com"] [uri "/services/data-analytics-research/"] [unique_id "aulBUNE1AMCtSNwZg5IvpgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 23:10:45
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:10:40.592776 2026] [security2:error] [pid 5336:tid 5336] [client 157.22.44.21:38285] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.44.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:10:40.592776 2026] [security2:error] [pid 5336:tid 5336] [client 157.22.44.21:38285] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||indyham.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "indyham.com"] [uri "/news/rasperry-pi-simple-install-script-for-fldigi-includes-rigcontrol-compiled/"] [unique_id "atlGcDVqSBBzd8dnikW-AwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-13 15:21:18
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.44.21
2026-09-13T15:48:56+02:00 vpn Access-Reject 'isl' station: 157.22.44.21 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 09:21:50
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.44.21
2026-09-10T10:27:54+02:00 vpn Access-Reject 'sbbolumber2' station: 157.22.44.21 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.44.21
2026-09-10T10:27:54+02:00 vpn Access-Reject 'sbbolumber2' station: 157.22.44.21 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 00:34:11
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-08 12:24:56
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 03:32:02
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
2026-09-04 22:26:12
UTC ·
(2 months ago)
FPROCO WEBEXPLOIT 157.22.44.21 (157.22.44.21)
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-03 03:12:14
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
