🇺🇸
TPI-Abuse
2026-11-13 17:37:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:37:53.317195 2026] [security2:error] [pid 29521:tid 29521] [client 172.83.252.215:24901] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:37:53.317195 2026] [security2:error] [pid 29521:tid 29521] [client 172.83.252.215:24901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/Nyberg/sunsets007.html"] [unique_id "avdK8UMnC0xns6QxXlM2FAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
henkaiser2001
2026-11-12 11:04:50
UTC ·
(2 days ago)
Actividad abusiva observada en Odoo: [blocked_url_autoban] suspicious_rest_route_probe. Ventana UTC 2026-11-12 11:04:50 a 2026-11-12 11:04:50. Observaciones: 1. Rutas: /?rest_route=/batch/v1. Acción local: IP bloqueada.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:13:58
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:13:54.801381 2026] [security2:error] [pid 17708:tid 17708] [client 172.83.252.215:47689] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:13:54.801381 2026] [security2:error] [pid 17708:tid 17708] [client 172.83.252.215:47689] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/02/21/vw-management-vanguard-of-proletariat/"] [unique_id "avJv0nrOBGu04P9EZwazhAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:16:46
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:16:43.097388 2026] [security2:error] [pid 25845:tid 25845] [client 172.83.252.215:33017] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:16:43.097388 2026] [security2:error] [pid 25845:tid 25845] [client 172.83.252.215:33017] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cosplayculture.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cosplayculture.com"] [uri "/2018/07/06/nerdians-cosplay-short-film-premieres/"] [unique_id "avHVy0iJnpGvi2h9365HewAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:36:16
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:36:10.093490 2026] [security2:error] [pid 30134:tid 30134] [client 172.83.252.215:20387] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:36:10.093490 2026] [security2:error] [pid 30134:tid 30134] [client 172.83.252.215:20387] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/partnersuche-feldkirch/"] [unique_id "avGUCrP2yySiPNbkj9SuAQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-09 00:38:53
UTC ·
(5 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:29:19
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:29:12.116436 2026] [security2:error] [pid 30280:tid 30280] [client 172.83.252.215:51103] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:29:12.116436 2026] [security2:error] [pid 30280:tid 30280] [client 172.83.252.215:51103] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/npp/kokomo.htm"] [unique_id "au_6mMeHEtlCXVrVLymcEAAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 15:46:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:46:24.827626 2026] [security2:error] [pid 7080:tid 7080] [client 172.83.252.215:16745] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:46:24.827626 2026] [security2:error] [pid 7080:tid 7080] [client 172.83.252.215:16745] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2013/03/lisa-hochstein-bikini-pictures-2/"] [unique_id "au32UKggkSHxCKE5nSR9hQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-05 00:42:09
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 06:04:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:04:20.283521 2026] [security2:error] [pid 16937:tid 16937] [client 172.83.252.215:64659] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:04:20.283521 2026] [security2:error] [pid 16937:tid 16937] [client 172.83.252.215:64659] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/stationery-designer-washington-dc/"] [unique_id "at7tZOjPugoadOEEeKvYWQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-10-25 06:32:26
UTC ·
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 172.83.252.215 (US/United States/-/-/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-10-15 13:13:23
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:13:15.127141 2026] [security2:error] [pid 10451:tid 10451] [client 172.83.252.215:29581] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.252.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:13:15.127141 2026] [security2:error] [pid 10451:tid 10451] [client 172.83.252.215:29581] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tiffanynovelty.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tiffanynovelty.com"] [uri "/Invitation/invitation/invite_h.html"] [unique_id "atDRazxurLxfUxgWBkEdiAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
