77.220.195.110

(mod_security) mod_security (id:210350) triggered by 77.220.195.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:52:21.843653 2026] [security2:error] [pid 23930:tid 23930] [client 77.220.195.110:50123] ... show more (mod_security) mod_security (id:210350) triggered by 77.220.195.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 10:52:21.843653 2026] [security2:error] [pid 23930:tid 23930] [client 77.220.195.110:50123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||isaacsonpaintings.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "isaacsonpaintings.com"] [uri "/art-history.html"] [unique_id "auIMJeobq2fxbvjp9LtL7gAAAA4"] show less

(mod_security) mod_security (id:210350) triggered by 77.220.195.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 00:01:16.546859 2026] [security2:error] [pid 20037:tid 20037] [client 77.220.195.110:13195] ... show more (mod_security) mod_security (id:210350) triggered by 77.220.195.110 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 00:01:16.546859 2026] [security2:error] [pid 20037:tid 20037] [client 77.220.195.110:13195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gundiahgazette.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gundiahgazette.com.au"] [uri "/History-GundyPub.html"] [unique_id "auFzjJPokWaC8rcaIPjnVgAAAA0"] show less

block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8

Incoming Layer 7 Flood Detected

Unauthorized VPN login attempts: 1 attempts were recorded from 77.220.195.110 2025-08-01T21:14:29+02:00 vpn Access-Reject 'tlee' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 77.220.195.110 2025-08-01T21:14:29+02:00 vpn Access-Reject 'tlee' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 1 attempts were recorded from 77.220.195.110 2025-07-23T16:16:33+02:00 vpn Access-Reject 'beliefs' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 77.220.195.110 2025-07-23T16:16:33+02:00 vpn Access-Reject 'beliefs' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 2 attempts were recorded from 77.220.195.110 2025-07-19T11:58:39+02:00 vpn Access-Reject 'CRAWFORD' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 77.220.195.110 2025-07-19T11:58:39+02:00 vpn Access-Reject 'CRAWFORD' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-19T12:08:28+02:00 vpn Access-Reject 'THOMAS' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 4 attempts were recorded from 77.220.195.110 2025-07-18T17:25:40+02:00 vpn Access-Reject 'admin' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacte ... show more Unauthorized VPN login attempts: 4 attempts were recorded from 77.220.195.110 2025-07-18T17:25:40+02:00 vpn Access-Reject 'admin' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-18T17:25:44+02:00 vpn Access-Reject 'administrator' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-18T17:28:03+02:00 vpn Access-Reject 'ldap' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-18T18:14:10+02:00 vpn Access-Reject 'admin' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 1 attempts were recorded from 77.220.195.110 2025-07-16T23:20:16+02:00 vpn Access-Reject 'vertexneo' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<red ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 77.220.195.110 2025-07-16T23:20:16+02:00 vpn Access-Reject 'vertexneo' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 3 attempts were recorded from 77.220.195.110 2025-07-08T23:35:06+02:00 vpn Access-Reject 'cost' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 77.220.195.110 2025-07-08T23:35:06+02:00 vpn Access-Reject 'cost' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-08T23:39:26+02:00 vpn Access-Reject 'reconciliation' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-08T23:44:03+02:00 vpn Access-Reject 'feeds' station: 77.220.195.110 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/77.220.195.110 2025-04-30 06:59:46 /+CSCOE+/logon.html

ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/77.220.195.110 2025-04-29 02:26:01 /+CSCOE+/logon.html

“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to log ... show more “BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user” show less

“BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to log ... show more “BruteForce attack on SSL VPN. Appears to be addresses coming from US Datacenters. Most all tried users are invalid and random.Most Tried Users are Guest and Admin. n type=event subtype=vpn level=alert action=ssl-login-fail msg=SSL user failed to logged in logdesc=SSL VPN login fail user=datadevscan02 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_unknown_user “ show less

77.220.195.110 - - [04/Apr/2025:20:37:50 -0600] "GET /wp-login.php HTTP/1.1" 301 4306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" ...