🇺🇸
TPI-Abuse
2026-11-11 10:49:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:49:13.926564 2026] [security2:error] [pid 31245:tid 31245] [client 157.22.47.253:27113] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:49:13.926564 2026] [security2:error] [pid 31245:tid 31245] [client 157.22.47.253:27113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/uncle.html"] [unique_id "avRIKXub5p72x1wVtCiAQwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:28:28
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:28:24.468479 2026] [security2:error] [pid 7419:tid 7419] [client 157.22.47.253:31939] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:28:24.468479 2026] [security2:error] [pid 7419:tid 7419] [client 157.22.47.253:31939] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.freepatternstoknit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.freepatternstoknit.com"] [uri "/knitted-sock-patterns.htm"] [unique_id "au_CKED1Nx_MA0MUVltXogAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 00:48:18
UTC ·
(6 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 20:57:03
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:56:58.301438 2026] [security2:error] [pid 5456:tid 5456] [client 157.22.47.253:12461] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:56:58.301438 2026] [security2:error] [pid 5456:tid 5456] [client 157.22.47.253:12461] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||watersideaccommodation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "watersideaccommodation.com"] [uri "/derwentretreat/hosts.php"] [unique_id "auucGjf_gRQkE9MFZscs9AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 23:58:31
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:58:24.207227 2026] [security2:error] [pid 9675:tid 9675] [client 157.22.47.253:29655] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:58:24.207227 2026] [security2:error] [pid 9675:tid 9675] [client 157.22.47.253:29655] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/p-k/ogl.html"] [unique_id "auE6oMQ6fzVKE2mbP2PolAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 19:15:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:15:20.000402 2026] [security2:error] [pid 14706:tid 14706] [client 157.22.47.253:15481] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.47.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:15:20.000402 2026] [security2:error] [pid 14706:tid 14706] [client 157.22.47.253:15481] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fgrotary.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fgrotary.org"] [uri "/speaker/music-ensembles/"] [unique_id "auD4R4AvqNT22CZjY_WXMAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 08:50:53
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 08:50:53
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 10:50:30
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.47.253
2026-09-10T11:30:08+02:00 vpn Access-Reject 'tameekap' station: 157.22.47.253 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redact ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.47.253
2026-09-10T11:30:08+02:00 vpn Access-Reject 'tameekap' station: 157.22.47.253 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
agabeckov
2026-09-09 21:25:12
UTC ·
(2 months ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇲🇽
Centynova Corp.
2026-07-14 16:53:01
UTC ·
(3 months ago)
Blocked by threat detection service. Centynova Security [Fuerza bruta y Ataque a servicios web]
Brute-Force
Web App Attack
2026-04-09 21:46:05
UTC ·
(7 months ago)
(wordpress) Failed wordpress login from 157.22.47.253 (SC/Seychelles/-)
Brute-Force
