🇺🇸
TPI-Abuse
2026-11-11 22:04:47
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:04:40.979376 2026] [security2:error] [pid 22005:tid 22005] [client 77.243.90.38:44717] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:04:40.979376 2026] [security2:error] [pid 22005:tid 22005] [client 77.243.90.38:44717] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/js/assets/owlcarousel/source/js/anime.min.js"] [unique_id "avTmeNCM__jhb7vkq-7UwgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:53:32
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:53:24.923388 2026] [security2:error] [pid 1326:tid 1326] [client 77.243.90.38:13551] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:53:24.923388 2026] [security2:error] [pid 1326:tid 1326] [client 77.243.90.38:13551] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/category/arizona/"] [unique_id "avS5pJCTgvAGqqfoQIaTIwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:02:50
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:02:46.506975 2026] [security2:error] [pid 23616:tid 23616] [client 77.243.90.38:24223] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:02:46.506975 2026] [security2:error] [pid 23616:tid 23616] [client 77.243.90.38:24223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/9087903793099f7d8625646100817c05"] [unique_id "avLdtuWFlnIoLH2aEQRPeQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 03:57:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 22:57:25.792644 2026] [security2:error] [pid 201306:tid 201320] [client 77.243.90.38:34165] M ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 22:57:25.792644 2026] [security2:error] [pid 201306:tid 201320] [client 77.243.90.38:34165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.newtrendmag.org"] [uri "/ntmfnewssudan.html"] [unique_id "auqtJTI5qNXobS5NnspH7QAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 01:46:03
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:45:56.248588 2026] [security2:error] [pid 3655:tid 3655] [client 77.243.90.38:37045] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:45:56.248588 2026] [security2:error] [pid 3655:tid 3655] [client 77.243.90.38:37045] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.easy2surf.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.easy2surf.com"] [uri "/cams/nylvcam.htm"] [unique_id "auqOVImWPAllNL70Lf2HnwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 20:17:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:17:01.145961 2026] [security2:error] [pid 10570:tid 10570] [client 77.243.90.38:26767] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.243.90.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:17:01.145961 2026] [security2:error] [pid 10570:tid 10570] [client 77.243.90.38:26767] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||draindoctor.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "draindoctor.us"] [uri "/8.html"] [unique_id "at0SPR7duPQG1vWpw7Rf3QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 22:21:02
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-13 22:21:02
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇭
SOC [GOLINE SA]
2026-09-09 01:15:47
UTC ·
(2 months ago)
[RoutePulse | 2026-09-09T01:15:47Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 77.243.90.38
EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — distributed attack (3 attempts/15min) — shun on the VPN ga ...
show more
[RoutePulse | 2026-09-09T01:15:47Z | RTBH-INJECTED]
ATTACK CLASS: vpn_bruteforce
SOURCE: 77.243.90.38
EVIDENCE: Shunned on the Cisco FTD VPN gateway — Cisco VPN RA Brute force on Cisco FTDv — distributed attack (3 attempts/15min) — shun on the VPN gateway
DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring
ACTION: BGP null route injected at RoutePulse network edge
show less
Brute-Force
Hacking
🇬🇧
relianoid.com
2026-07-23 12:28:19
UTC ·
(3 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
2026-07-19 12:02:26
UTC ·
(3 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 15-02.77.243.90.38.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
🇦🇺
oncord
2026-07-15 00:27:40
UTC ·
(3 months ago)
Form spam
Web Spam
🇧🇪
Saec
2026-06-20 14:45:02
UTC ·
(4 months ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (6× on saec.me)
Port Scan
Web App Attack
