🇺🇸
TPI-Abuse
2026-11-12 18:11:51
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:11:45.565876 2026] [security2:error] [pid 1165:tid 1182] [client 157.22.73.151:56553] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:11:45.565876 2026] [security2:error] [pid 1165:tid 1182] [client 157.22.73.151:56553] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||baronlongford.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "baronlongford.com"] [uri "/Baron-Dungannon.html"] [unique_id "avYBYdG6Z1sNgkL8wsuUDQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 23:44:37
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:44:30.508710 2026] [security2:error] [pid 31278:tid 31278] [client 157.22.73.151:19779] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:44:30.508710 2026] [security2:error] [pid 31278:tid 31278] [client 157.22.73.151:19779] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/67-68-5.html"] [unique_id "aupx3i8Y87jVWU28OjZPRAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 13:39:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:39:46.292362 2026] [security2:error] [pid 12054:tid 12054] [client 157.22.73.151:52871] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:39:46.292362 2026] [security2:error] [pid 12054:tid 12054] [client 157.22.73.151:52871] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gpaarch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gpaarch.com"] [uri "/Projects/GPA-Architects-Projects-Palm-Springs-International-Airport.html"] [unique_id "aunkIuy1-sYwWMFWYENeGAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 06:42:03
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 02:42:00.506025 2026] [security2:error] [pid 22729:tid 22729] [client 157.22.73.151:13011] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 02:42:00.506025 2026] [security2:error] [pid 22729:tid 22729] [client 157.22.73.151:13011] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.natural-history-conservation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.natural-history-conservation.com"] [uri "/WRE.htm"] [unique_id "atsBuId-yDmmNBgToIa7XwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
findlab
2026-09-17 22:30:01
UTC ·
(1 month ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-05 04:53:28
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-04 01:05:40
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 21:05:33.038117 2026] [security2:error] [pid 1546:tid 1546] [client 157.22.73.151:55889] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 21:05:33.038117 2026] [security2:error] [pid 1546:tid 1546] [client 157.22.73.151:55889] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||herecometheplanes.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "herecometheplanes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apoZXe3eHGUFUQWcAyRj7AAAABI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-03 03:13:24
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-01 04:17:37
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:17:31.157985 2026] [security2:error] [pid 9700:tid 9765] [client 157.22.73.151:34515] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:17:31.157985 2026] [security2:error] [pid 9700:tid 9765] [client 157.22.73.151:34515] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||laradioactivitat.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "laradioactivitat.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apZR25w9967_aSs1uS6PRAAAAcM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-11 04:01:21
UTC ·
(3 months ago)
FPROCO WEBEXPLOIT 157.22.73.151 (157.22.73.151)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 08:52:15
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 04:52:07.074837 2026] [security2:error] [pid 1969133:tid 1969133] [client 157.22.73.151:6459 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 04:52:07.074837 2026] [security2:error] [pid 1969133:tid 1969133] [client 157.22.73.151:64591] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||achari.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "achari.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anWct33zIn6UhlU-jmn4HQAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 17:54:20
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 13:54:13.218000 2026] [security2:error] [pid 1485721:tid 1485752] [client 157.22.73.151:1204 ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.73.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 13:54:13.218000 2026] [security2:error] [pid 1485721:tid 1485752] [client 157.22.73.151:12043] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||trejbal.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "trejbal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amEDxZEovsILTwH3bts3mQAAARg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-29 08:27:54
UTC ·
(4 months ago)
Fail2Ban banned 157.22.73.151 for security violations in jail wp-armour. Log: 2026/06/29 08:27:53 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.73.151 | Target: wplogin" , client: 157.22.73.151, server: [REDACTED], request: ...
show more
Fail2Ban banned 157.22.73.151 for security violations in jail wp-armour. Log: 2026/06/29 08:27:53 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.73.151 | Target: wplogin" , client: 157.22.73.151, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-28 08:57:47
UTC ·
(4 months ago)
Fail2Ban banned 157.22.73.151 for security violations in jail wp-armour. Log: 2026/06/28 08:57:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.73.151 | Target: wplogin" , client: 157.22.73.151, server: [REDACTED], request: ...
show more
Fail2Ban banned 157.22.73.151 for security violations in jail wp-armour. Log: 2026/06/28 08:57:46 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.73.151 | Target: wplogin" , client: 157.22.73.151, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇫🇷
Tilellit.PRO
2026-06-27 05:20:28
UTC ·
(4 months ago)
Fail2Ban banned 157.22.73.151 for security violations in jail wp-armour. Log: 2026/06/27 05:20:28 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.73.151 | Target: wplogin" , client: 157.22.73.151, server: [REDACTED], request: ...
show more
Fail2Ban banned 157.22.73.151 for security violations in jail wp-armour. Log: 2026/06/27 05:20:28 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 157.22.73.151 | Target: wplogin" , client: 157.22.73.151, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
