🇺🇸
TPI-Abuse
2026-11-10 07:25:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:25:21.706330 2026] [security2:error] [pid 14057:tid 14057] [client 172.83.254.252:23309] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:25:21.706330 2026] [security2:error] [pid 14057:tid 14057] [client 172.83.254.252:23309] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/festivals/the-brisbane-writers-festival-is-returning-with-plenty-of-page-turners-next-week/"] [unique_id "avLG4bQECQdd_365fkb35QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 10:59:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:59:00.546390 2026] [security2:error] [pid 17486:tid 17486] [client 172.83.254.252:36823] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 05:59:00.546390 2026] [security2:error] [pid 17486:tid 17486] [client 172.83.254.252:36823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bostonlog.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/running-through-the-center-of-the-world-jeffery-lung-april-21-2014/"] [unique_id "avGndIyuR6MWqcXd4EozcQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-05 19:40:14
UTC ·
(6 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 02:40:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:40:03.768641 2026] [security2:error] [pid 21751:tid 21766] [client 172.83.254.252:26907] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:40:03.768641 2026] [security2:error] [pid 21751:tid 21766] [client 172.83.254.252:26907] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||howsyourlife.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "howsyourlife.org"] [uri "/2020/06/27/thought-for-june-27th-good-news-of-happiness/"] [unique_id "auvsg2QTg54Y74Lrq3ytbwAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 01:05:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:05:44.480990 2026] [security2:error] [pid 13980:tid 13980] [client 172.83.254.252:28387] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:05:44.480990 2026] [security2:error] [pid 13980:tid 13980] [client 172.83.254.252:28387] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alfredintelligence.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alfredintelligence.com"] [uri "/bluetooth-client-server/"] [unique_id "auvWaItVrF1K98Iqo-pnaQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 15:33:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:33:51.562648 2026] [security2:error] [pid 23301:tid 23301] [client 172.83.254.252:16989] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:33:51.562648 2026] [security2:error] [pid 23301:tid 23301] [client 172.83.254.252:16989] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.christianebooks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.christianebooks.com"] [uri "/"] [unique_id "auitXzD7h320JNO20bQ31wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 14:49:22
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:49:17.677536 2026] [security2:error] [pid 1430751:tid 1430761] [client 172.83.254.252:10 ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:49:17.677536 2026] [security2:error] [pid 1430751:tid 1430761] [client 172.83.254.252:10609] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.potterpuppetpals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.potterpuppetpals.com"] [uri "/sexy.swf"] [unique_id "auii7WWNVBLarBTrzdoBvAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 17:03:48
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:03:41.390609 2026] [security2:error] [pid 12559:tid 12559] [client 172.83.254.252:42761] ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:03:41.390609 2026] [security2:error] [pid 12559:tid 12559] [client 172.83.254.252:42761] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/humanitarian-aid/"] [unique_id "auIq7ZlMthQmgGk6Vy9muAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-10-25 08:05:42
UTC ·
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 172.83.254.252 (US/United States/-/-/-)
SQL Injection
🇫🇷
dynamix
2026-10-21 04:10:48
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
