🇺🇸
TPI-Abuse
2026-11-06 20:59:36
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:59:31.674044 2026] [security2:error] [pid 3920:tid 3920] [client 77.95.172.35:19799] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 15:59:31.674044 2026] [security2:error] [pid 3920:tid 3920] [client 77.95.172.35:19799] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/868-57-5.html"] [unique_id "au4_s1ECzFz3-gh4tAC9tQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 09:29:35
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:29:30.743350 2026] [security2:error] [pid 15098:tid 15098] [client 77.95.172.35:61963] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:29:30.743350 2026] [security2:error] [pid 15098:tid 15098] [client 77.95.172.35:61963] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bahamascruisersguide.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bahamascruisersguide.com"] [uri "/BCG-Main/About-Guide.html"] [unique_id "aumpetOOJzmVMiYuXaejNgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 02:56:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:56:41.139426 2026] [security2:error] [pid 22121:tid 22121] [client 77.95.172.35:57027] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:56:41.139426 2026] [security2:error] [pid 22121:tid 22121] [client 77.95.172.35:57027] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nwtree.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nwtree.com"] [uri "/"] [unique_id "auK16Zeljdu4z4yXAIEiTQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 22:11:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:11:07.867031 2026] [security2:error] [pid 27503:tid 27503] [client 77.95.172.35:32797] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:11:07.867031 2026] [security2:error] [pid 27503:tid 27503] [client 77.95.172.35:32797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/pedstore/s/Sari.html"] [unique_id "auEhe76p2TBe0Xm5UM6glwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 12:08:30
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 08:08:25.522199 2026] [security2:error] [pid 4204:tid 4204] [client 77.95.172.35:48055] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 08:08:25.522199 2026] [security2:error] [pid 4204:tid 4204] [client 77.95.172.35:48055] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/e7db3006c018c1c4862566bd000abc75/93863eb3bf5d144f862564550008dfcb"] [unique_id "at9CuTp1rQRLOBOTSMdzSAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 04:15:41
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 00:15:35.530992 2026] [security2:error] [pid 24543:tid 24543] [client 77.95.172.35:23427] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 00:15:35.530992 2026] [security2:error] [pid 24543:tid 24543] [client 77.95.172.35:23427] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/how-much-time-rsvp/"] [unique_id "at7T576FefwHUMTkpEYkpAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 03:39:24
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:39:19.334389 2026] [security2:error] [pid 20943:tid 20943] [client 77.95.172.35:63549] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:39:19.334389 2026] [security2:error] [pid 20943:tid 20943] [client 77.95.172.35:63549] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||periodpiano.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "periodpiano.org"] [uri "/html/chickering_grand_8-2-_-22163.html"] [unique_id "atgz55azya5nGudRdJYo2gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-30 19:51:00
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-03 07:30:25
UTC ·
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 02:30:21.005883 2026] [security2:error] [pid 28687:tid 28687] [client 77.95.172.35:43283] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 77.95.172.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 02:30:21.005883 2026] [security2:error] [pid 28687:tid 28687] [client 77.95.172.35:43283] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jimcameron.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jimcameron.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaaODSCO3o6F5KLBb2puFwAAAAA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
