🇺🇸
TPI-Abuse
2026-08-26 12:33:34
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 08:33:27.972426 2026] [security2:error] [pid 20783:tid 20783] [client 183.87.99.121:28510] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||toomuchcaffeine.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "toomuchcaffeine.net"] [uri "/"] [unique_id "ao7dFyalLoV6d4IVE9c5oQAAAB4"], referer: https://theillustrator.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 11:32:01
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 07:31:53.562939 2026] [security2:error] [pid 31391:tid 31391] [client 183.87.99.121:60621] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||muskogeecleaning.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "muskogeecleaning.com"] [uri "/"] [unique_id "ao7OqVOvLXGUt8JMQjymoAAAAAE"], referer: https://lawyerinjeddah.com/all/874/11.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-08-26 11:07:11
(3 hours ago)
ecw-Joomla User : try to access forms...
Hacking
🇺🇸
TPI-Abuse
2026-08-26 11:04:58
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 07:04:53.691271 2026] [security2:error] [pid 15321:tid 15321] [client 183.87.99.121:43648] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||calvarycavaliers.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "calvarycavaliers.org"] [uri "/"] [unique_id "ao7IVVNFYfkPvT7niBpWHQAAAAc"], referer: https://calvaryshreveport.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 10:05:30
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:05:24.910179 2026] [security2:error] [pid 23255:tid 23255] [client 183.87.99.121:45419] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||robertseyewear.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "robertseyewear.com"] [uri "/"] [unique_id "ao66ZHqQIvANr2n6OOlvigAAAIQ"], referer: https://indians.cc/page-a537b3bbefd4df2ede6ddf69a559973e.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 03:37:21
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 23:37:16.847891 2026] [security2:error] [pid 31344:tid 31344] [client 183.87.99.121:30472] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||henryweb.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "henryweb.net"] [uri "/"] [unique_id "ao5fbM-gh7udhhIAUyMkvgAAAAE"], referer: https://henryweb.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 03:10:21
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 23:10:17.474428 2026] [security2:error] [pid 3164279:tid 3164387] [client 183.87.99.121:10139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||forrestwozniak.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "forrestwozniak.com"] [uri "/"] [unique_id "ao5ZGZ6_TRTe7k7y6zad6wAAAEk"], referer: https://forrestwozniak.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 19:48:44
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 15:48:40.670469 2026] [security2:error] [pid 24054:tid 24054] [client 183.87.99.121:48912] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fadcometal.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fadcometal.com"] [uri "/"] [unique_id "ao3xmMjVfZFwAF4j_bOz8QAAAAU"], referer: https://fadcometal.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 16:33:43
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 12:33:37.108476 2026] [security2:error] [pid 22985:tid 22985] [client 183.87.99.121:33883] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||certifiedfarmersmarkets.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "certifiedfarmersmarkets.org"] [uri "/"] [unique_id "ao3D4TqHlhR99qMrpugs2QAAABE"], referer: https://certifiedfarmersmarkets.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Jochen Pretli
2026-08-25 12:01:41
(1 day ago)
connection to honeypot
Email Spam
Port Scan
🇺🇸
TPI-Abuse
2026-08-25 09:02:25
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:02:19.628235 2026] [security2:error] [pid 24189:tid 24189] [client 183.87.99.121:37299] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||riser-astrology.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "riser-astrology.com"] [uri "/about-2"] [unique_id "ao1aG9GiADgo6xhGHVAx4AAAAAA"], referer: https://riser-astrology.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 06:34:33
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 02:34:25.284853 2026] [security2:error] [pid 17991:tid 17991] [client 183.87.99.121:16807] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||saynotoofland.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "saynotoofland.org"] [uri "/"] [unique_id "ao03cRDSE7jS_tPB-RASvgAAAAE"], referer: https://saynotoofland.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 07:49:05
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 03:49:00.866061 2026] [security2:error] [pid 6856:tid 6856] [client 183.87.99.121:52484] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kbalan.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kbalan.com"] [uri "/"] [unique_id "aolUbEsZrRv_ObLM5Pm3bwAAAAw"], referer: https://kbalan.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-08-21 12:12:59
(5 days ago)
tcp/443 (10 or more attempts)
Port Scan
🇺🇸
TPI-Abuse
2026-08-21 02:08:11
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 183.87.99.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 22:08:07.414598 2026] [security2:error] [pid 16447:tid 16447] [client 183.87.99.121:50370] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||denkyusalesca.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "denkyusalesca.com"] [uri "/sample-page"] [unique_id "aoezByTgdVsesuuofyzmKgAAABI"], referer: https://denkyusalesca.com/
show less
Brute-Force
Bad Web Bot
Web App Attack