37.72.141.97

(mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:48:37.404836 2026] [security2:error] [pid 19836:tid 19836] [client 37.72.141.97:38131] Mod ... show more (mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:48:37.404836 2026] [security2:error] [pid 19836:tid 19836] [client 37.72.141.97:38131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Bergeron, Beatsie Davis obit 1996 age 71.htm"] [unique_id "avRWFaeHQFOluD9mNqzVCgAAAAQ"] show less

(mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:08:35.326197 2026] [security2:error] [pid 14187:tid 14187] [client 37.72.141.97:36917] Mod ... show more (mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:08:35.326197 2026] [security2:error] [pid 14187:tid 14187] [client 37.72.141.97:36917] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.trasimeno.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.trasimeno.ws"] [uri "/cucina_persico_it.html"] [unique_id "avQwk4-EvlQyjc8tsM9ubwAAAAg"] show less

(mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 01:26:15.705027 2026] [security2:error] [pid 32237:tid 32237] [client 37.72.141.97:10985] Mod ... show more (mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 01:26:15.705027 2026] [security2:error] [pid 32237:tid 32237] [client 37.72.141.97:10985] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/arab-spring/page/3/"] [unique_id "augtBxdv9FeL14zS8fsHRwAAAAo"] show less

(mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:31:37.418169 2026] [security2:error] [pid 25121:tid 25121] [client 37.72.141.97:36271] Mod ... show more (mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:31:37.418169 2026] [security2:error] [pid 25121:tid 25121] [client 37.72.141.97:36271] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||johnmueller.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "johnmueller.org"] [uri "/TREE-JOHN/WebCard/wc131/wc131_273.html"] [unique_id "auSAGTCt6MNGp-6xXSh67QAAAAM"] show less

(mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:05:09.503158 2026] [security2:error] [pid 27662:tid 27662] [client 37.72.141.97:52193] Mod ... show more (mod_security) mod_security (id:210350) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:05:09.503158 2026] [security2:error] [pid 27662:tid 27662] [client 37.72.141.97:52193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.chicagowca.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.chicagowca.com"] [uri "/"] [unique_id "atsxVcWaFg8_7X5SN1WyaQAAAAU"] show less

Web attack/Malicious activity detected

Wordpress login attempts

Impersonating Good bots

Incoming Layer 7 Flood Detected

2025-01-31 08:54:06 /bg-upper.png

Unauthorized VPN login attempts: 1 attempts were recorded from 37.72.141.97 2024-11-23T05:49:12+01:00 vpn Access-Reject '461' station: 37.72.141.97 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'

Unauthorized VPN login attempts: 1 attempts were recorded from 37.72.141.97 2024-11-22T05:39:21+01:00 vpn Access-Reject '294' station: 37.72.141.97 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'

SMS pumping attack from foreign country

(mod_security) mod_security (id:210730) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 17:29:03.564935 2024] [security2:error] [pid 10588] [client 37.72.141.97:52751] [client 37.72 ... show more (mod_security) mod_security (id:210730) triggered by 37.72.141.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 17:29:03.564935 2024] [security2:error] [pid 10588] [client 37.72.141.97:52751] [client 37.72.141.97] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||harbouronline.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "harbouronline.com"] [uri "/mailto:[email protected]"] [unique_id "ZnCqn0iJ77cFmzURJXVpVQAAAAE"] show less

block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8