🇺🇸
TPI-Abuse
2026-07-18 14:47:30
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 10:47:23.957724 2026] [security2:error] [pid 20717:tid 20717] [client 183.87.96.80:28899] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||encoremtmorris.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "encoremtmorris.com"] [uri "/"] [unique_id "aluR-waSnTNjODZVBlJSxwAAAAA"], referer: https://encoremtmorris.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 06:44:53
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:44:46.487257 2026] [security2:error] [pid 11602:tid 11602] [client 183.87.96.80:62199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pharmaceuticalsalescertifications.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pharmaceuticalsalescertifications.com"] [uri "/the-value-of-certifications/"] [unique_id "alnPXkfB995VXgf6TT02QgAAAA0"], referer: https://pharmaceuticalsalescertifications.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 19:05:35
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 15:05:31.211590 2026] [security2:error] [pid 13191:tid 13200] [client 183.87.96.80:13799] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||certifiedprojectmanager.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedprojectmanager.us"] [uri "/saudi-arabia-ubt.html"] [unique_id "alkre0SknoutI9HdWWewSwAAAcM"], referer: https://certifiedprojectmanager.us/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-07-16 11:06:02
(2 days ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01]
Hacking
Bad Web Bot
🇬🇧
thetomtaylor.co.uk
2026-07-16 10:08:02
(2 days ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice02,wa01,wa02]
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-14 06:45:23
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 02:45:16.958749 2026] [security2:error] [pid 11070:tid 11070] [client 183.87.96.80:47198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.whodatnation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.whodatnation.com"] [uri "/2026/03/"] [unique_id "alXa_DR-WHPxOzKPt3_moAAAAAA"], referer: https://www.whodatnation.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 02:20:10
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:20:07.233882 2026] [security2:error] [pid 17928:tid 17928] [client 183.87.96.80:17188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||enchantmenttours.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "enchantmenttours.com"] [uri "/"] [unique_id "alWc11rL1FKXFR9TP_rVHQAAABc"], referer: https://enchantmenttours.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 23:21:22
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 19:21:16.880609 2026] [security2:error] [pid 25616:tid 25616] [client 183.87.96.80:57255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||circleinthesquare.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "circleinthesquare.org"] [uri "/"] [unique_id "alVy7Ed0ou05-OCoK1QKbwAAAAQ"], referer: https://circleinthesquare.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 11:57:23
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 07:57:15.626040 2026] [security2:error] [pid 15428:tid 15428] [client 183.87.96.80:48852] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bickleton.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bickleton.org"] [uri "/driving-directions"] [unique_id "alTSm-ExzaheUnBlTr05NgAAAAI"], referer: https://bickleton.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 04:23:02
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 00:22:57.099450 2026] [security2:error] [pid 19179:tid 19179] [client 183.87.96.80:52356] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jsw4.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jsw4.net"] [uri "/"] [unique_id "alRoIR80ijthpt1ICaqPWwAAAAo"], referer: https://jsw4.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-07 04:27:00
(1 week ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
kosada.com
2026-07-06 13:10:34
(1 week ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-06 07:25:54
(1 week ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-03 08:10:38
(2 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-03 01:55:34
(2 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot