🇺🇸
TPI-Abuse
2026-11-11 22:32:48
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:32:43.429138 2026] [security2:error] [pid 31426:tid 31577] [client 185.77.220.86:49691] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:32:43.429138 2026] [security2:error] [pid 31426:tid 31577] [client 185.77.220.86:49691] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howardhallis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howardhallis.com"] [uri "/doctorstrange/customs/st139/index.html"] [unique_id "avTtC9RPPKCswz1bNLiLtQAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:46:09
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:46:05.322831 2026] [security2:error] [pid 15717:tid 15717] [client 185.77.220.86:37063] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:46:05.322831 2026] [security2:error] [pid 15717:tid 15717] [client 185.77.220.86:37063] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gormish.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gormish.org"] [uri "/denise/whats-old-is-whats-new/"] [unique_id "avGyfXL79Us6N55f-xlECwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:07:20
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:07:14.976937 2026] [security2:error] [pid 15330:tid 15359] [client 185.77.220.86:14039] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:07:14.976937 2026] [security2:error] [pid 15330:tid 15359] [client 185.77.220.86:14039] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbestcarting.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbestcarting.com"] [uri "/dumpster-rental-east-meadow/"] [unique_id "avCQIg89GyEgkkcQpTOIJwAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 20:32:18
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:32:13.844268 2026] [security2:error] [pid 10576:tid 10576] [client 185.77.220.86:49969] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:32:13.844268 2026] [security2:error] [pid 10576:tid 10576] [client 185.77.220.86:49969] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||glslightingandcontrols.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "glslightingandcontrols.com"] [uri "/controlled-power-company-line-card.html"] [unique_id "au45TW-gl_yVAwohlH9_NQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 00:38:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:38:09.282201 2026] [security2:error] [pid 21364:tid 21364] [client 185.77.220.86:31389] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 19:38:09.282201 2026] [security2:error] [pid 21364:tid 21364] [client 185.77.220.86:31389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seskalee.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seskalee.com"] [uri "/what-a-big-life-change-meant-for-me/"] [unique_id "auvP8WtUnIXV4cHfU_8VcgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 00:06:23
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-10-31 02:24:10
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 23:33:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:33:01.717888 2026] [security2:error] [pid 2543:tid 2543] [client 185.77.220.86:60793] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 19:33:01.717888 2026] [security2:error] [pid 2543:tid 2543] [client 185.77.220.86:60793] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.petesplaza.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.petesplaza.com"] [uri "/website/hungary/geneology.html"] [unique_id "auKGLbMWkgecdbO1mLeA4QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 18:11:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:11:32.646911 2026] [security2:error] [pid 13513:tid 13513] [client 185.77.220.86:47117] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:11:32.646911 2026] [security2:error] [pid 13513:tid 13513] [client 185.77.220.86:47117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/house-of-clarendon/"] [unique_id "at5GVI8-iRMQPXYef4f0DAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 08:26:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:26:38.406128 2026] [security2:error] [pid 15938:tid 15938] [client 185.77.220.86:61663] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:26:38.406128 2026] [security2:error] [pid 15938:tid 15938] [client 185.77.220.86:61663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.turtlehill.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.turtlehill.org"] [uri "/bsf/bsf.html"] [unique_id "atxrvmnao_Rw4p4k3yHo2wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-08-31 08:52:29
UTC ·
(2 months ago)
185.77.220.86 - - [31/Aug/2026:10:52:29 +0200] "GET /admin/ HTTP/1.1" 302 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36"
...
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-08-09 17:58:21
UTC ·
(3 months ago)
Form spam
Web Spam
🇬🇧
Oakley
2026-07-18 17:22:01
UTC ·
(3 months ago)
(mod_security) mod_security (id:900178) triggered by 185.77.220.86 (US/United States/-): 5 in the last 900 secs
Web App Attack
Hacking
🇮🇩
Burayot
2026-07-02 02:47:43
UTC ·
(4 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 185.77.220.86 (US/United States/-): 2 in the last 3600 secs
Web App Attack
🇺🇸
TPI-Abuse
2026-03-24 06:24:20
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 02:24:12.932524 2026] [security2:error] [pid 15878:tid 15878] [client 185.77.220.86:32917] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 24 02:24:12.932524 2026] [security2:error] [pid 15878:tid 15878] [client 185.77.220.86:32917] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||linguistes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "linguistes.com"] [uri "/"] [unique_id "acIuDKiEs_L9HS9zWCI3dwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
