🇪🇸
librebit
2026-11-07 05:37:23
UTC ·
(5 hours ago)
Brute force
Brute-Force
🇫🇷
Sklurk
2026-11-06 02:01:45
UTC ·
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:00:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:00:38.891807 2026] [security2:error] [pid 3922:tid 3922] [client 157.22.75.122:18593] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:00:38.891807 2026] [security2:error] [pid 3922:tid 3922] [client 157.22.75.122:18593] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||accordionfactory.com.accordionclub.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "accordionfactory.com.accordionclub.org"] [uri "/About-Us/"] [unique_id "auxh1q1bjoVgo9lRU2mp1AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 04:56:51
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:56:48.459083 2026] [security2:error] [pid 2429234:tid 2429247] [client 157.22.75.122:3536 ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:56:48.459083 2026] [security2:error] [pid 2429234:tid 2429247] [client 157.22.75.122:35361] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ennerdale.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ennerdale.org"] [uri "/Only-Private-Bailiwick.html"] [unique_id "aulpkJZoBIUv4nL0uM6dqAAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 15:48:31
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:48:28.008660 2026] [security2:error] [pid 4661:tid 4661] [client 157.22.75.122:39841] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 10:48:28.008660 2026] [security2:error] [pid 4661:tid 4661] [client 157.22.75.122:39841] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/teachin.htm"] [unique_id "audfTMEoTzgNnljk4yesBQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2026-08-20 06:46:16
UTC ·
(2 months ago)
WordPress Brute Force
Brute-Force
2026-08-14 21:30:06
UTC ·
(2 months ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
2026-04-28 06:53:33
UTC ·
(6 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇫🇷
masterguru
2026-04-07 09:27:23
UTC ·
(7 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.22.75.122 (GB/United Kingdom/-): 1 in the last 3600 secs (0-196)
Hacking
2025-12-15 20:39:41
UTC ·
(10 months ago)
Forum/form spam
Web Spam
