🇺🇸
TPI-Abuse
2026-11-08 05:44:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:43:57.270319 2026] [security2:error] [pid 3405:tid 3424] [client 157.22.74.61:35051] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:43:57.270319 2026] [security2:error] [pid 3405:tid 3424] [client 157.22.74.61:35051] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fishrapper.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fishrapper.com"] [uri "/fishing-report-minnesota-october-2019.html"] [unique_id "avAMHfhJm46VwW37phPNbAAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:05:39
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:05:35.083758 2026] [security2:error] [pid 22316:tid 22316] [client 157.22.74.61:52673] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:05:35.083758 2026] [security2:error] [pid 22316:tid 22316] [client 157.22.74.61:52673] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/news/watch-the-all-new-trailer-for-all-is-true-starring-kenneth-branagh-judi-dench-and-ian-mckellen/"] [unique_id "aulBbxRLsFdNwEFPX1ZmOQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 20:51:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:51:07.884771 2026] [security2:error] [pid 5617:tid 5643] [client 157.22.74.61:63367] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:51:07.884771 2026] [security2:error] [pid 5617:tid 5643] [client 157.22.74.61:63367] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||draas.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "draas.info"] [uri "/doc002.htm"] [unique_id "auJgO9l7Uo61YVZWeLkXzAAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 18:53:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:53:21.435040 2026] [security2:error] [pid 26075:tid 26075] [client 157.22.74.61:18323] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:53:21.435040 2026] [security2:error] [pid 26075:tid 26075] [client 157.22.74.61:18323] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||davesastro.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "davesastro.com"] [uri "/page6.html"] [unique_id "atutIdDivSi5Z6Ec83SnpgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-29 00:25:05
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 20:24:59.561913 2026] [security2:error] [pid 1150425:tid 1150425] [client 157.22.74.61:11371] ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 20:24:59.561913 2026] [security2:error] [pid 1150425:tid 1150425] [client 157.22.74.61:11371] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kippert.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kippert.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amlIWw9rPNPZbfgG5c_o_QAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-27 11:12:38
UTC ·
(3 months ago)
2026-07-27T13:12:37.860687+02:00 polaris wp(sahpa.co.za)[185848]: Blocked authentication attempt for admin from 157.22.74.61
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 23:24:00
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 19:23:53.351988 2026] [security2:error] [pid 3487623:tid 3487623] [client 157.22.74.61:16949] ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 19:23:53.351988 2026] [security2:error] [pid 3487623:tid 3487623] [client 157.22.74.61:16949] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||silsby.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "silsby.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amaXCbpapq7yyuASuQZkpQAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-26 11:35:47
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-23 22:32:08
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-22 05:53:28
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 01:53:24.564601 2026] [security2:error] [pid 393847:tid 393866] [client 157.22.74.61:46151] M ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 01:53:24.564601 2026] [security2:error] [pid 393847:tid 393866] [client 157.22.74.61:46151] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||schecter.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schecter.org"] [uri "/wp-json/wp/v2/users"] [unique_id "amBa1NIJrCtd8wHtDpK7VwAAAQ8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-17 20:10:49
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇭
backslash
2026-07-12 07:42:00
UTC ·
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-21 04:54:41
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 00:54:36.929336 2026] [security2:error] [pid 28410:tid 28410] [client 157.22.74.61:31547] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 00:54:36.929336 2026] [security2:error] [pid 28410:tid 28410] [client 157.22.74.61:31547] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thesweetfam.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thesweetfam.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag6QDMlwU6mhcqpZ_7e1TQAAABk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 23:14:28
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 19:14:23.301637 2026] [security2:error] [pid 13350:tid 13350] [client 157.22.74.61:51153] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.74.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 19:14:23.301637 2026] [security2:error] [pid 13350:tid 13350] [client 157.22.74.61:51153] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scpublicity.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scpublicity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agudT4taKIP_4yTHRZscsQAAAAY"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-05-17 21:28:59
UTC ·
(5 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
