🇩🇪
LRob
2026-11-11 12:26:12
UTC ·
(11 hours ago)
Not following 301 redirects — wasted requests | method: GET | path: /metier/releve-de-carrieres/ | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-10 15:20:02
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:19:55.253338 2026] [security2:error] [pid 23412:tid 23412] [client 157.22.74.17:46489] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:19:55.253338 2026] [security2:error] [pid 23412:tid 23412] [client 157.22.74.17:46489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||onward.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "onward.ws"] [uri "/page-2/index.html"] [unique_id "avM2G_vVEBQpmo8No2LzPgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:51:02
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:50:58.483513 2026] [security2:error] [pid 31482:tid 31482] [client 157.22.74.17:22125] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:50:58.483513 2026] [security2:error] [pid 31482:tid 31482] [client 157.22.74.17:22125] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.albuquerquelimobus.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.albuquerquelimobus.com"] [uri "/about-us.html"] [unique_id "avBiImxb0xkuASUi0rykmgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 15:48:36
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:48:30.419387 2026] [security2:error] [pid 4603:tid 4603] [client 157.22.74.17:34745] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:48:30.419387 2026] [security2:error] [pid 4603:tid 4603] [client 157.22.74.17:34745] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/teachin.htm"] [unique_id "audfTjDTCZplNsYJPnozLwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 08:16:37
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:16:31.861154 2026] [security2:error] [pid 13916:tid 13916] [client 157.22.74.17:52995] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 04:16:31.861154 2026] [security2:error] [pid 13916:tid 13916] [client 157.22.74.17:52995] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/colbertism/"] [unique_id "auRSXx6ZNGH-nxtsNaAezgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:33:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:33:18.650887 2026] [security2:error] [pid 16181:tid 16200] [client 157.22.74.17:44899] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:33:18.650887 2026] [security2:error] [pid 16181:tid 16200] [client 157.22.74.17:44899] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aassone.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aassone.com"] [uri "/"] [unique_id "auN1TqgtGeHMB0Gkf1TcfwAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-07-15 16:43:32
UTC ·
(3 months ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-07-14 01:38:38
UTC ·
(3 months ago)
Brute force
Brute-Force
2026-06-07 08:18:04
UTC ·
(5 months ago)
WordPress Brute Force
Brute-Force
🇺🇸
TPI-Abuse
2026-03-28 08:07:41
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 04:07:35.508906 2026] [security2:error] [pid 10133:tid 10133] [client 157.22.74.17:16599] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 04:07:35.508906 2026] [security2:error] [pid 10133:tid 10133] [client 157.22.74.17:16599] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hotjive.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotjive.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aceMR2_QEsRRHmBuaNUwNAAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 02:17:45
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 22:17:37.652234 2026] [security2:error] [pid 19804:tid 19804] [client 157.22.74.17:63611] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 22:17:37.652234 2026] [security2:error] [pid 19804:tid 19804] [client 157.22.74.17:63611] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcwyo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcwyo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acXowaGlrFN63lxDiE6p-AAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 05:51:20
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:51:14.855056 2026] [security2:error] [pid 3263:tid 3263] [client 157.22.74.17:49879] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:51:14.855056 2026] [security2:error] [pid 3263:tid 3263] [client 157.22.74.17:49879] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||advantage-plus.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "advantage-plus.net"] [uri "/wp-json/wp/v2/users"] [unique_id "ab4x0kAecsXkMotmJhnL2wAAAAo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
