🇺🇸
TPI-Abuse
2026-10-28 15:07:58
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 11:07:51.720725 2026] [security2:error] [pid 27947:tid 27947] [client 185.96.37.77:22223] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 11:07:51.720725 2026] [security2:error] [pid 27947:tid 27947] [client 185.96.37.77:22223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||chriseaton.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "chriseaton.com"] [uri "/drums.htm"] [unique_id "auIPx6SHPPlOUE9yqRXxaAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 13:29:36
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:29:31.822097 2026] [security2:error] [pid 30045:tid 30045] [client 185.96.37.77:62681] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:29:31.822097 2026] [security2:error] [pid 30045:tid 30045] [client 185.96.37.77:62681] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/hin/ik.html"] [unique_id "auCnO9cGj8CBBkdDwQfXSwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 12:46:14
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:46:07.766766 2026] [security2:error] [pid 3006:tid 3006] [client 185.96.37.77:20573] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:46:07.766766 2026] [security2:error] [pid 3006:tid 3006] [client 185.96.37.77:20573] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.borzois.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.borzois.com"] [uri "/history/eglon.html"] [unique_id "atIcj8gznqAtCucLJ2pySQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 10:16:27
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:16:22.582657 2026] [security2:error] [pid 6773:tid 6773] [client 185.96.37.77:26099] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:16:22.582657 2026] [security2:error] [pid 6773:tid 6773] [client 185.96.37.77:26099] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lcssouth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lcssouth.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai_Q9qmJ5BpfEnl7DLx0qgAAAAM"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-06-14 17:23:44
(4 months ago)
WordPress login attempt
Brute-Force
🇫🇷
dynamix
2026-06-09 19:00:26
(4 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
kosada.com
2026-06-09 13:44:25
(4 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-06-05 21:26:07
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:26:03.097741 2026] [security2:error] [pid 744:tid 744] [client 185.96.37.77:49839] ModSecu ...
show more
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 17:26:03.097741 2026] [security2:error] [pid 744:tid 744] [client 185.96.37.77:49839] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||andrewmcgrath.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andrewmcgrath.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiM-6198CRFdtYCjcdNN9gAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-22 14:44:02
(5 months ago)
Web password guessing
Brute-Force
🇺🇸
TPI-Abuse
2026-05-17 15:00:34
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 11:00:30.038824 2026] [security2:error] [pid 24968:tid 24968] [client 185.96.37.77:18359] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 17 11:00:30.038824 2026] [security2:error] [pid 24968:tid 24968] [client 185.96.37.77:18359] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||newerc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "newerc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agnYDnn0Zjk2TGiP_ND89gAAADg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:40:28
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:40:24.078777 2026] [security2:error] [pid 13043:tid 13043] [client 185.96.37.77:18461] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 185.96.37.77 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:40:24.078777 2026] [security2:error] [pid 13043:tid 13043] [client 185.96.37.77:18461] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lundtrading.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lundtrading.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agbb-K8733Or_H90cbyabAAAABs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-05-13 14:48:56
(5 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇦🇺
weblite
2025-09-08 13:19:27
(1 year ago)
LONG_RUNNING_WP_BRUTE_FORCE
Brute-Force
Web App Attack
2024-12-15 00:56:42
(1 year ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
