🇺🇸
TPI-Abuse
2026-11-14 08:18:11
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:18:03.563798 2026] [security2:error] [pid 20786:tid 20786] [client 77.220.194.136:27397] ...
show more
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:18:03.563798 2026] [security2:error] [pid 20786:tid 20786] [client 77.220.194.136:27397] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/instrumental/aspiradordepipetascompipsoportepara.html"] [unique_id "avgZO1Ha2mAIkgSgh6Q7wQAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-11-14 06:44:36
UTC ·
(18 hours ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-11-11 04:01:30
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:01:24.739130 2026] [security2:error] [pid 12375:tid 12375] [client 77.220.194.136:54989] ...
show more
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 23:01:24.739130 2026] [security2:error] [pid 12375:tid 12375] [client 77.220.194.136:54989] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "avPolBKBC-qac80_A8lJygAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-11 04:00:14
UTC ·
(3 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇩🇪
big-cloud.nl
2026-11-07 19:55:27
UTC ·
(1 week ago)
Try to access /xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:50:28
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:50:20.275423 2026] [security2:error] [pid 4593:tid 4593] [client 77.220.194.136:47107] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:50:20.275423 2026] [security2:error] [pid 4593:tid 4593] [client 77.220.194.136:47107] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2012/08/melanie-griffith-bikini-pictures/"] [unique_id "au9IvMyu5c_ho6kf8r7y_QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 19:31:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:31:22.871944 2026] [security2:error] [pid 14139:tid 14139] [client 77.220.194.136:15791] ...
show more
(mod_security) mod_security (id:210350) triggered by 77.220.194.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 15:31:22.871944 2026] [security2:error] [pid 14139:tid 14139] [client 77.220.194.136:15791] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||greatchristianadventure.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "greatchristianadventure.com"] [uri "/category/leadership/"] [unique_id "auD8ClVSZfD2oTqrpgF54QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-29 20:36:00
UTC ·
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
Lino Project
2026-03-31 08:26:02
UTC ·
(7 months ago)
77.220.194.136 - - [31/Mar/2026:10:26:00 +0200] "GET /wp-admin/plugins.php HTTP/1.1" 403 6518 "-" "Wget/1.21.4"
...
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-03-30 08:41:26
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2026-03-29 16:21:00
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
stinpriza
2026-03-28 22:58:56
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-27 17:26:30
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-23 10:26:28
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇩🇪
stinpriza
2026-03-20 05:16:02
UTC ·
(7 months ago)
Web App Attack
Web App Attack
