🇺🇸
TPI-Abuse
2026-11-14 10:17:01
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:16:52.246794 2026] [security2:error] [pid 16339:tid 16339] [client 157.22.45.131:41577] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:16:52.246794 2026] [security2:error] [pid 16339:tid 16339] [client 157.22.45.131:41577] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/ed/np46.html"] [unique_id "avg1FN5mUVz96yJB0iutPwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
abivia
2026-11-13 17:23:53
UTC ·
(18 hours ago)
Abivia WAF trigger: Rule scriptKiddies: Probing for vulnerabilities uri: /oembed.php?url=https%3A%2F%2Fambitonline.com%2Fnextrelease%2F2012%2F09%2Fthe-blog-is-ported-again-hello-wordpress%2F
Hacking
🇺🇸
TPI-Abuse
2026-11-10 07:04:16
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:04:12.553188 2026] [security2:error] [pid 12671:tid 12671] [client 157.22.45.131:48067] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:04:12.553188 2026] [security2:error] [pid 12671:tid 12671] [client 157.22.45.131:48067] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2011/05/heidi-montag-bikini-pictures-3/"] [unique_id "avLB7NGEXXj4m9Mh7kyoigAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 22:43:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:43:22.156459 2026] [security2:error] [pid 20447:tid 20530] [client 157.22.45.131:47947] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 18:43:22.156459 2026] [security2:error] [pid 20447:tid 20530] [client 157.22.45.131:47947] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||writeonce.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "writeonce.org"] [uri "/Reading_JSON.php"] [unique_id "auJ6iiL94KW3T6vLa5flOQAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 21:07:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:07:35.592420 2026] [security2:error] [pid 8944:tid 8981] [client 157.22.45.131:29315] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:07:35.592420 2026] [security2:error] [pid 8944:tid 8981] [client 157.22.45.131:29315] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||draas.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "draas.info"] [uri "/doc002.htm"] [unique_id "auESl4rvqP7WcVixoNN5xQAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 19:37:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:37:30.378471 2026] [security2:error] [pid 28655:tid 28655] [client 157.22.45.131:58407] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:37:30.378471 2026] [security2:error] [pid 28655:tid 28655] [client 157.22.45.131:58407] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||spirits66.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spirits66.com"] [uri "/reviews.htm"] [unique_id "auD9etcGAsDJpsV-cGf-5AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 10:48:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:48:20.130369 2026] [security2:error] [pid 21331:tid 21331] [client 157.22.45.131:32691] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:48:20.130369 2026] [security2:error] [pid 21331:tid 21331] [client 157.22.45.131:32691] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||criticalmassofficial.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "criticalmassofficial.com"] [uri "/"] [unique_id "atyM9CDFH5drGXWy10aO7QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 08:02:09
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:02:05.197200 2026] [security2:error] [pid 12703:tid 12703] [client 157.22.45.131:22985] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:02:05.197200 2026] [security2:error] [pid 12703:tid 12703] [client 157.22.45.131:22985] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||agenesis7.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "agenesis7.com"] [uri "/Products/Test/TstPtf9902.htm"] [unique_id "atxl_eneKnPHfog9Ov_MCAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 07:36:37
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:36:32.803949 2026] [security2:error] [pid 16302:tid 16302] [client 157.22.45.131:51383] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:36:32.803949 2026] [security2:error] [pid 16302:tid 16302] [client 157.22.45.131:51383] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.turtlehill.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.turtlehill.org"] [uri "/cleanup/khen/blz0.html"] [unique_id "athrgARh5tF2fxd9DTphtgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-04 11:56:08
UTC ·
(2 months ago)
SQLi Attempt
Hacking
SQL Injection
Web App Attack
🇬🇧
SilverZippo
2026-03-17 03:58:35
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2026-03-14 07:16:51
UTC ·
(8 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
kjaerulff
2026-03-11 14:44:16
UTC ·
(8 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇩🇪
kjaerulff
2026-03-07 12:18:40
UTC ·
(8 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:02:11
UTC ·
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
