🇺🇸
TPI-Abuse
2026-11-14 13:14:28
UTC ·
(8 minutes ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:14:25.031474 2026] [security2:error] [pid 32014:tid 32014] [client 162.252.53.111:24355] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 08:14:25.031474 2026] [security2:error] [pid 32014:tid 32014] [client 162.252.53.111:24355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/2013-my-legs-were-screaming-to-stop-but-my-brain-wouldnt-listen/"] [unique_id "avhesZ1btDmgm7DWgxLzpAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 03:33:39
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:33:33.080349 2026] [security2:error] [pid 14107:tid 14107] [client 162.252.53.111:62567] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:33:33.080349 2026] [security2:error] [pid 14107:tid 14107] [client 162.252.53.111:62567] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kentweakley.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kentweakley.com"] [uri "/blog"] [unique_id "avUzjdYK-_YaAan7y-vQVQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 23:06:55
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:06:48.994508 2026] [security2:error] [pid 7139:tid 7139] [client 162.252.53.111:40835] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:06:48.994508 2026] [security2:error] [pid 7139:tid 7139] [client 162.252.53.111:40835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.trasimeno.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.trasimeno.ws"] [uri "/torre_vernazzano_it.html"] [unique_id "au-vCFd9PXLYbMcHTYVI7QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 08:48:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:48:07.485005 2026] [security2:error] [pid 12648:tid 12648] [client 162.252.53.111:62347] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:48:07.485005 2026] [security2:error] [pid 12648:tid 12648] [client 162.252.53.111:62347] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.painting-with-numbers.com"] [uri "/blog/seismograph-bobble"] [unique_id "au7lx_en6c9Qr9w2w7faEwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 03:54:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:54:09.864092 2026] [security2:error] [pid 23099:tid 23099] [client 162.252.53.111:12885] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 22:54:09.864092 2026] [security2:error] [pid 23099:tid 23099] [client 162.252.53.111:12885] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kevinfranz.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kevinfranz.com"] [uri "/wiki.seoanalyticslocal.com/"] [unique_id "auv94XxftSD7TZ_-ngwpxgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 06:23:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:23:06.336660 2026] [security2:error] [pid 19920:tid 19920] [client 162.252.53.111:45663] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:23:06.336660 2026] [security2:error] [pid 19920:tid 19920] [client 162.252.53.111:45663] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gpaarch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gpaarch.com"] [uri "/Projects/GPA-Architects-Projects-LAX-Los Angeles International-Airport-Terminal-9.html"] [unique_id "aul9yp_40Xm0KPnvOx4tAwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
wbsouza
2026-11-02 03:46:08
UTC ·
(1 week ago)
CrowdSec: infra/appsec-challenge-requested-log — automated firewall drops on self-hosted IDS sensor
Hacking
🇺🇸
TPI-Abuse
2026-10-31 13:32:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 09:32:21.629557 2026] [security2:error] [pid 8835:tid 8835] [client 162.252.53.111:39589] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 09:32:21.629557 2026] [security2:error] [pid 8835:tid 8835] [client 162.252.53.111:39589] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.flavornet.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/3025-30-7.html"] [unique_id "auXt5Zkc52MUE1zeXtpsYQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 13:43:11
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:43:07.041808 2026] [security2:error] [pid 7317:tid 7317] [client 162.252.53.111:16371] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 09:43:07.041808 2026] [security2:error] [pid 7317:tid 7317] [client 162.252.53.111:16371] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||whengarbotalks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whengarbotalks.com"] [uri "/album/pages/125_Crayon_RDKaye.htm"] [unique_id "auSe6522dYNXMzuO4RIZ5QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 15:52:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:52:19.121510 2026] [security2:error] [pid 12037:tid 12037] [client 162.252.53.111:38897] ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 11:52:19.121510 2026] [security2:error] [pid 12037:tid 12037] [client 162.252.53.111:38897] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joescherzi.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joescherzi.com"] [uri "/"] [unique_id "at93M1I32kUAS9dB56FSOgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 13:45:18
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:45:14.388198 2026] [security2:error] [pid 3871:tid 3871] [client 162.252.53.111:20987] M ...
show more
(mod_security) mod_security (id:210350) triggered by 162.252.53.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:45:14.388198 2026] [security2:error] [pid 3871:tid 3871] [client 162.252.53.111:20987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mywheatgrass.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mywheatgrass.com"] [uri "/grow-wheatgrass.shtml"] [unique_id "atjB6mVnBDu5Tt_AUct2sgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-02 01:57:00
UTC ·
(2 months ago)
Web Spam
🇦🇺
oncord
2026-09-01 23:30:00
UTC ·
(2 months ago)
Form spam
Web Spam
