🇺🇸
TPI-Abuse
2026-11-09 15:06:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:06:39.939968 2026] [security2:error] [pid 4351:tid 4351] [client 185.77.220.89:36629] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 10:06:39.939968 2026] [security2:error] [pid 4351:tid 4351] [client 185.77.220.89:36629] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/bodybuilders/eddierobinson.html"] [unique_id "avHhf0PMU8V5u5DMBMk02wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:05:08
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:05:03.830949 2026] [security2:error] [pid 16093:tid 16093] [client 185.77.220.89:22017] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:05:03.830949 2026] [security2:error] [pid 16093:tid 16093] [client 185.77.220.89:22017] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/sell-your-stuff-tips-for-a-successful-yard-sale-part-2/"] [unique_id "avGo357bhGk9UITunpJlLQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:41:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:41:09.941932 2026] [security2:error] [pid 17352:tid 17352] [client 185.77.220.89:51419] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:41:09.941932 2026] [security2:error] [pid 17352:tid 17352] [client 185.77.220.89:51419] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.grupo-visalud.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.grupo-visalud.com"] [uri "/2024/07/find-love-and-confidence-with-fat-dating/"] [unique_id "avGVNdkfJA-2ziS5-3uqlQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:41:39
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:41:31.833517 2026] [security2:error] [pid 21260:tid 21260] [client 185.77.220.89:51077] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:41:31.833517 2026] [security2:error] [pid 21260:tid 21260] [client 185.77.220.89:51077] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/06/04/amending-the-constitution-the-national-convention-option/"] [unique_id "avF5Kz4piQHkjHLlYUvAWQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:47:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:47:01.040123 2026] [security2:error] [pid 22251:tid 22256] [client 185.77.220.89:61173] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:47:01.040123 2026] [security2:error] [pid 22251:tid 22256] [client 185.77.220.89:61173] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.chelseyrae.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chelseyrae.com"] [uri "/fashion/floral-polka-dots/"] [unique_id "avAM1XeW4aKAxgqqza4KIAAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:16:59
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:16:55.769418 2026] [security2:error] [pid 2151:tid 2151] [client 185.77.220.89:10245] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:16:55.769418 2026] [security2:error] [pid 2151:tid 2151] [client 185.77.220.89:10245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.themadwriter.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.themadwriter.us"] [uri "/hell-kill-us-all-9053.htm"] [unique_id "au_bl_IhYqENRDEV6hlRkgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 20:58:43
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:58:36.211442 2026] [security2:error] [pid 3825007:tid 3825034] [client 185.77.220.89:1535 ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:58:36.211442 2026] [security2:error] [pid 3825007:tid 3825034] [client 185.77.220.89:15351] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||certifiedprojectmanager.eu|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedprojectmanager.eu"] [uri "/disclaimer.html.html"] [unique_id "auzt_EZwagPl3mPW98gCNwAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 05:24:16
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:24:08.633472 2026] [security2:error] [pid 7220:tid 7220] [client 185.77.220.89:20371] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:24:08.633472 2026] [security2:error] [pid 7220:tid 7220] [client 185.77.220.89:20371] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sydneysue.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sydneysue.com"] [uri "/cookin-crickets-for-sydney-sue.html"] [unique_id "aulv-N0C_aIplvnTjGUr8AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 09:38:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:38:05.001580 2026] [security2:error] [pid 18318:tid 18318] [client 185.77.220.89:12953] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 04:38:05.001580 2026] [security2:error] [pid 18318:tid 18318] [client 185.77.220.89:12953] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/18479-58-8.html"] [unique_id "aucIfDNUi7Ysq4di7uVvsgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 12:45:06
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 08:44:56.846450 2026] [security2:error] [pid 11222:tid 11222] [client 185.77.220.89:37927] M ...
show more
(mod_security) mod_security (id:210350) triggered by 185.77.220.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 08:44:56.846450 2026] [security2:error] [pid 11222:tid 11222] [client 185.77.220.89:37927] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Paull, Barney W Bill obit 1998.htm"] [unique_id "auCcyOpxYrKE_964Q3LwugAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2026-08-10 01:45:04
UTC ·
(3 months ago)
Form spam
Web Spam
🇬🇧
consul.to
2026-05-03 15:51:26
UTC ·
(6 months ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇪
voormedia
2026-05-02 11:58:44
UTC ·
(6 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-27 19:35:30
UTC ·
(9 months ago)
WP Login Scan Activities
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-01-24 02:21:51
UTC ·
(9 months ago)
WP Login Scan Activities
Web App Attack
