🇺🇸
TPI-Abuse
2026-10-24 02:32:33
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 22:32:25.411603 2026] [security2:error] [pid 19229:tid 19229] [client 157.22.45.82:36757] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||brinkworthmodels.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "brinkworthmodels.com"] [uri "/models/trains.htm"] [unique_id "atwYuV6lhswZDEmH5igvjwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 21:41:47
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:41:39.527183 2026] [security2:error] [pid 8894:tid 8894] [client 157.22.45.82:64459] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||steinmetzjewelers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "steinmetzjewelers.com"] [uri "/gpahomeinspections.com/index-4.html"] [unique_id "atvUkytLaaDNOJBA3oQvAAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-08-19 16:48:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇪🇸
librebit
2026-08-07 03:50:46
(2 months ago)
Brute force
Brute-Force
🇨🇦
DRI
2026-07-27 10:03:12
(2 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 13:53:32
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 09:53:27.543794 2026] [security2:error] [pid 3023149:tid 3023149] [client 157.22.45.82:34999] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||globalodit.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "globalodit.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amYRVxqR7i8OmX_AIdFCfgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 21:35:44
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:35:38.367060 2026] [security2:error] [pid 26118:tid 26140] [client 157.22.45.82:39039] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||michaelmercier.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "michaelmercier.com"] [uri "/wp-json/wp/v2/users"] [unique_id "allOqt8GdxAAic2J7cnWkwAAANQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 11:28:30
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 07:28:24.160924 2026] [security2:error] [pid 12084:tid 12084] [client 157.22.45.82:55345] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||waleed.co|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "waleed.co"] [uri "/wp-json/wp/v2/users"] [unique_id "aldu2BQJMreTeP3XUoqumwAAADQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-07-15 01:38:49
(3 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇫🇷
solution.it
2026-05-29 11:52:04
(4 months ago)
[Fri May 29 13:52:03.641342 2026] [php7:error] [pid 3533986:tid 3533986] [client 157.22.45.82:49471] ...
show more
[Fri May 29 13:52:03.641342 2026] [php7:error] [pid 3533986:tid 3533986] [client 157.22.45.82:49471] script '/var/www/html/blog.solution.it/wp-admin/xmlrpc.php' not found or unable to stat
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-04-29 16:35:04
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 12:34:57.477195 2026] [security2:error] [pid 2642:tid 2666] [client 157.22.45.82:15205] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rmgmediagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rmgmediagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afIzMd8ct03vI0Wblcun6gAAABY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-15 05:25:43
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 01:25:37.351511 2026] [security2:error] [pid 4112964:tid 4112964] [client 157.22.45.82:19501] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nekstlevel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nekstlevel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ad8hUSF6YXbqEWKtxGranwAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kjaerulff
2026-03-02 19:50:16
(7 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
🇺🇸
TPI-Abuse
2026-01-06 02:42:42
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.45.82 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 21:42:36.588262 2026] [security2:error] [pid 8264:tid 8264] [client 157.22.45.82:39621] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.firstunitedreserve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.firstunitedreserve.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aVx2nGmqvNJrwateu2YY8QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-01-05 13:01:54
(9 months ago)
URL scan
Brute-Force
Web App Attack
