🇺🇸
TPI-Abuse
2026-10-28 20:47:58
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:47:52.823248 2026] [security2:error] [pid 31802:tid 31802] [client 157.22.47.238:21857] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:47:52.823248 2026] [security2:error] [pid 31802:tid 31802] [client 157.22.47.238:21857] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.accsbg.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.accsbg.org"] [uri "/robots.txt"] [unique_id "auJfeE7VWmUHauy4jfPQtwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:38:07
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:37:59.930332 2026] [security2:error] [pid 32671:tid 32671] [client 157.22.47.238:49847] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:37:59.930332 2026] [security2:error] [pid 32671:tid 32671] [client 157.22.47.238:49847] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lertap5.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lertap5.com"] [uri "/store/licenses78.htm"] [unique_id "auJPF3gagGw9mdD3vtlAigAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 20:54:22
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 16:54:15.309181 2026] [security2:error] [pid 21308:tid 21308] [client 157.22.47.238:9161] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 16:54:15.309181 2026] [security2:error] [pid 21308:tid 21308] [client 157.22.47.238:9161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||miles2go.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "miles2go.net"] [uri "/miles2go_2006/updates/february/feb8.htm"] [unique_id "auEPdyFy5TC9C8PEBVsNgQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 04:22:06
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:21:58.516207 2026] [security2:error] [pid 24772:tid 24772] [client 157.22.47.238:57193] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:21:58.516207 2026] [security2:error] [pid 24772:tid 24772] [client 157.22.47.238:57193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.vexxarr.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.vexxarr.com"] [uri "/archive.php"] [unique_id "atmPZiCozE-ZlxlJexqucgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-08-25 18:42:01
(2 months ago)
block ruleset 51D5331ECDCF70C2C6410C0D0EEB5F69B17B5F56
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-02 07:10:08
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 03:10:02.652056 2026] [security2:error] [pid 3223315:tid 3223315] [client 157.22.47.238:2663 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.47.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 02 03:10:02.652056 2026] [security2:error] [pid 3223315:tid 3223315] [client 157.22.47.238:26633] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aboutio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aboutio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "am7tStRxdrojcZI6-eGO1AAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-30 16:40:55
(2 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-26 01:58:58
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-24 10:12:54
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-19 02:47:28
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇫🇷
tecnicorioja
2026-05-20 22:00:24
(5 months ago)
wp-login attack [20/May/2026:12:18:01
Brute-Force
Web App Attack
🇩🇪
Hazzard
2025-12-27 20:32:49
(10 months ago)
(wordpress) Failed wordpress login from 157.22.47.238 (DE/Germany/North Rhine-Westphalia/Ochtrup/-/[redacted])
Brute-Force
