🇺🇸
TPI-Abuse
2026-11-15 21:14:27
UTC ·
(36 minutes ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:14:20.791949 2026] [security2:error] [pid 3792:tid 3792] [client 157.22.75.179:20043] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:14:20.791949 2026] [security2:error] [pid 3792:tid 3792] [client 157.22.75.179:20043] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/live-music/experience-jurassic-park-in-concert/"] [unique_id "avogrHzJ5veqXq7tdZjYuAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 19:18:58
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:18:50.817972 2026] [security2:error] [pid 32329:tid 32329] [client 157.22.75.179:37449] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:18:50.817972 2026] [security2:error] [pid 32329:tid 32329] [client 157.22.75.179:37449] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.summitartists.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.summitartists.com"] [uri "/odooley/ref.htm"] [unique_id "avoFmkKxVqj15zbR2dTPSgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-13 04:00:14
UTC ·
(2 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
2026-11-07 13:25:23
UTC ·
(1 week ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-02 08:22:45
UTC ·
(1 week ago)
Brute force
Brute-Force
2026-10-30 20:56:21
UTC ·
(2 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 03:49:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:49:06.679847 2026] [security2:error] [pid 2821:tid 2821] [client 157.22.75.179:19739] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 23:49:06.679847 2026] [security2:error] [pid 2821:tid 2821] [client 157.22.75.179:19739] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.coyotepoet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.coyotepoet.com"] [uri "/home_books.htm"] [unique_id "auQTsgdrKxvQyS3kCm53xwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 16:25:39
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 12:25:33.349725 2026] [security2:error] [pid 14750:tid 14750] [client 157.22.75.179:38823] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 12:25:33.349725 2026] [security2:error] [pid 14750:tid 14750] [client 157.22.75.179:38823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.hvacmechanalysis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hvacmechanalysis.com"] [uri "/services/dynamic-balancing/"] [unique_id "atzb_frpVhG9PLQ1TDAYLAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 02:23:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 22:23:11.624501 2026] [security2:error] [pid 29114:tid 29114] [client 157.22.75.179:62277] M ...
show more
(mod_security) mod_security (id:210350) triggered by 157.22.75.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 22:23:11.624501 2026] [security2:error] [pid 29114:tid 29114] [client 157.22.75.179:62277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||turtletaekwondo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "turtletaekwondo.com"] [uri "/index_files/Page10458.htm"] [unique_id "atwWjyUa7NI3IY3zRroinwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-23 18:29:23
UTC ·
(3 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-20 10:19:50
UTC ·
(3 weeks ago)
Brute force
Brute-Force
🇪🇸
librebit
2026-10-18 06:29:59
UTC ·
(4 weeks ago)
Brute force
Brute-Force
2026-10-16 16:17:07
UTC ·
(4 weeks ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
2026-10-09 09:40:52
UTC ·
(1 month ago)
Automated scanner probing RD Web Access login pages
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
