🇺🇸
TPI-Abuse
2026-11-13 10:40:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:40:37.119763 2026] [security2:error] [pid 21946:tid 21946] [client 77.220.192.29:44393] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:40:37.119763 2026] [security2:error] [pid 21946:tid 21946] [client 77.220.192.29:44393] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.goodacoustic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.goodacoustic.com"] [uri "/wordpress/wp-json/oembed/1.0/embed"] [unique_id "avbpJffrp376EdF109PKHQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 04:45:29
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:45:23.799663 2026] [security2:error] [pid 8071:tid 8071] [client 77.220.192.29:48337] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 23:45:23.799663 2026] [security2:error] [pid 8071:tid 8071] [client 77.220.192.29:48337] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gormish.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gormish.org"] [uri "/denise/for-better-or-for-worse/"] [unique_id "avKhY0hTonq_R028gXgNUQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 10:10:18
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:10:14.685652 2026] [security2:error] [pid 13877:tid 13877] [client 77.220.192.29:16289] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:10:14.685652 2026] [security2:error] [pid 13877:tid 13877] [client 77.220.192.29:16289] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.astariamusic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.astariamusic.com"] [uri "/"] [unique_id "atsyhvbZVlwwGANcaJIucAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-23 11:49:17
UTC ·
(1 month ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 77.220.192.29 (US/United States/-): 1 in the last 3600 secs (0-195)
Hacking
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
nationaleventpros.com
2026-09-05 04:42:45
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-09-05 04:26:36
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 00:26:30.892334 2026] [security2:error] [pid 5811:tid 5811] [client 77.220.192.29:30693] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 00:26:30.892334 2026] [security2:error] [pid 5811:tid 5811] [client 77.220.192.29:30693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||HARINTONMECHANICAL.COM|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harintonmechanical.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apuZ9qSLwFq1DOmg4TRuFAAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-04 22:23:51
UTC ·
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
nationaleventpros.com
2026-09-03 02:24:24
UTC ·
(2 months ago)
WordPress login attempt
Brute-Force
🇺🇸
ambor
2026-09-01 14:53:23
UTC ·
(2 months ago)
Honeypot access: WordPress admin access attempt. Path: /wp-login.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 19:24:06
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:24:01.916448 2026] [security2:error] [pid 24999:tid 24999] [client 77.220.192.29:58363] M ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:24:01.916448 2026] [security2:error] [pid 24999:tid 24999] [client 77.220.192.29:58363] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wizind.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wizind.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apHgUaDqlzn3c2PG7a5RqwAAABg"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 15:17:35
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:17:31.712448 2026] [security2:error] [pid 15610:tid 15610] [client 77.220.192.29:35559] M ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 11:17:31.712448 2026] [security2:error] [pid 15610:tid 15610] [client 77.220.192.29:35559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hpepaper.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hpepaper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aosPC907Y33oBjdcABZn7wAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-21 04:04:49
UTC ·
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 00:04:42.388984 2026] [security2:error] [pid 13860:tid 13860] [client 77.220.192.29:26771] M ...
show more
(mod_security) mod_security (id:225170) triggered by 77.220.192.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 00:04:42.388984 2026] [security2:error] [pid 13860:tid 13860] [client 77.220.192.29:26771] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||insidepublications.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "insidepublications.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aofOWgF_U1ZfAYyfSbtuhQAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-17 06:25:03
UTC ·
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-08-13 05:30:03
UTC ·
(3 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
