🇺🇸
TPI-Abuse
2026-11-08 08:16:17
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:16:09.630640 2026] [security2:error] [pid 2049:tid 2049] [client 157.22.72.136:19311] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 03:16:09.630640 2026] [security2:error] [pid 2049:tid 2049] [client 157.22.72.136:19311] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.darrenj.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.darrenj.com"] [uri "/uncategorized/darrey-jay-hosting-memphis-blues-society-blues-jam/"] [unique_id "avAvyRNjHNSTFhwh00FF7AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-07 00:58:20
UTC ·
(2 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 11:18:26
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:18:20.981971 2026] [security2:error] [pid 556:tid 556] [client 157.22.72.136:9749] ModSec ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:18:20.981971 2026] [security2:error] [pid 556:tid 556] [client 157.22.72.136:9749] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/Journal-Archive/styled-28/index.html"] [unique_id "au23fDtz7M_J0EzV83yPWgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agabeckov
2026-09-14 04:42:06
UTC ·
(1 month ago)
Fail2Ban detected brute-force attempt on Cisco Anyconnect
VPN IP
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-09 02:47:56
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 07:47:17
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
nationaleventpros.com
2026-08-20 17:07:18
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-08-17 19:26:25
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 15:26:17.495241 2026] [security2:error] [pid 10297:tid 10297] [client 157.22.72.136:44133] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 15:26:17.495241 2026] [security2:error] [pid 10297:tid 10297] [client 157.22.72.136:44133] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kunzteam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kunzteam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoNgWSzXYqSoUUs2yZmx-QAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 15:44:50
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 11:44:43.799162 2026] [security2:error] [pid 850456:tid 850456] [client 157.22.72.136:24861] ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 11:44:43.799162 2026] [security2:error] [pid 850456:tid 850456] [client 157.22.72.136:24861] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hawarcenter.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hawarcenter.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anX9awHelTswyOA5bjOGPQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 22:21:26
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:21:20.043181 2026] [security2:error] [pid 563007:tid 563007] [client 157.22.72.136:56365] ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:21:20.043181 2026] [security2:error] [pid 563007:tid 563007] [client 157.22.72.136:56365] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hpepaper.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hpepaper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "allZYA_zcv-cJunvo1IubQAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-07-13 12:07:16
UTC ·
(3 months ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-05 04:41:06
UTC ·
(4 months ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇺🇸
TPI-Abuse
2026-06-20 00:58:03
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 20:57:56.732428 2026] [security2:error] [pid 19082:tid 19082] [client 157.22.72.136:57111] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.72.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 20:57:56.732428 2026] [security2:error] [pid 19082:tid 19082] [client 157.22.72.136:57111] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kmp.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmp.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ajXllNapF7xOBGtArhZ3YAAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-05-11 03:15:08
UTC ·
(5 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
