🇪🇸
librebit
2026-11-14 00:37:41
UTC ·
(6 hours ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-13 08:49:58
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:49:54.109533 2026] [security2:error] [pid 30578:tid 30578] [client 157.22.72.18:29913] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 03:49:54.109533 2026] [security2:error] [pid 30578:tid 30578] [client 157.22.72.18:29913] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/burkina-faso/page/3/"] [unique_id "avbPMtWME-kU6kS5urMcSQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-12 02:08:02
UTC ·
(2 days ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-11 17:19:55
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:19:48.783956 2026] [security2:error] [pid 500:tid 500] [client 157.22.72.18:11325] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:19:48.783956 2026] [security2:error] [pid 500:tid 500] [client 157.22.72.18:11325] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lightningbug.farm|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lightningbug.farm"] [uri "/recipes/soups/vegan-coconut-lentil-soup/"] [unique_id "avSjtFXW5YSXNL3xUw5hGQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-10 12:00:14
UTC ·
(3 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-06 07:54:00
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:53:55.528333 2026] [security2:error] [pid 18548:tid 18548] [client 157.22.72.18:32951] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 02:53:55.528333 2026] [security2:error] [pid 18548:tid 18548] [client 157.22.72.18:32951] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/135"] [unique_id "au2Hk1eCxMw5CG77_4Bz_QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 16:08:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 11:08:32.397193 2026] [security2:error] [pid 2341:tid 2341] [client 157.22.72.18:61417] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.72.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 11:08:32.397193 2026] [security2:error] [pid 2341:tid 2341] [client 157.22.72.18:61417] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/999-10-0.html"] [unique_id "auyqAIoetN4lX_Qw3JitngAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-01 00:42:27
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇨🇿
Countryman
2026-09-13 09:07:40
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-10 03:22:08
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 157.22.72.18
2026-09-10T04:15:32+02:00 vpn Access-Reject 'TECOM1' station: 157.22.72.18 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
Brute-Force
Web App Attack
🇪🇸
librebit
2026-06-10 21:49:42
UTC ·
(5 months ago)
RDWeb scan
Web App Attack
2026-03-16 20:34:47
UTC ·
(7 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇧🇪
voormedia
2026-03-16 10:11:09
UTC ·
(7 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇨🇭
backslash
2026-03-14 16:18:00
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
www.winos.me
2026-02-12 17:52:55
UTC ·
(9 months ago)
Banned due to high error rate on HTTP/1.1 protocol
Brute-Force
Web App Attack
