🇺🇸
TPI-Abuse
2026-11-07 20:43:15
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:43:11.875393 2026] [security2:error] [pid 2238967:tid 22 ...
show more
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:43:11.875393 2026] [security2:error] [pid 2238967:tid 2238978] [client 195.91.27.16:7094] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||danandlila.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "danandlila.com"] [uri "/"] [unique_id "au-NX-U_CM7zAy7HYCIcaQAAAUk"], referer: https://mistresspklikeddf.blogspot.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 15:21:29
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:21:26.115207 2026] [security2:error] [pid 2748:tid 2748] ...
show more
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:21:26.115207 2026] [security2:error] [pid 2748:tid 2748] [client 195.91.27.16:37141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dragonfly.garden|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dragonfly.garden"] [uri "/403.shtml"] [unique_id "au3wdm3PBhiO3gN_NtSucAAAABA"], referer: https://each.co.in/redirect.php?ref_host=fredericton.cn
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
PTScreens
2026-11-03 05:42:56
UTC ·
(1 week ago)
Rotating-proxy exit used by a headless browser crawler on an image host: 1 request on 2026-11-03, part of a ~1M request/day scrape spread over ~57k IPs.
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-02 00:28:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:28:22.483544 2026] [security2:error] [pid 25211:tid 2521 ...
show more
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:28:22.483544 2026] [security2:error] [pid 25211:tid 25211] [client 195.91.27.16:34435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bookofraphael.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bookofraphael.com"] [uri "/bookofraphael1/37-surrender-your-expectations.html"] [unique_id "aufZJrNPA9SrblB-ye5VxAAAAAQ"], referer: https://bookofraphael.com/table-of-contents.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 19:02:49
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:02:44.541555 2026] [security2:error] [pid 21381:tid 2138 ...
show more
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 15:02:44.541555 2026] [security2:error] [pid 21381:tid 21381] [client 195.91.27.16:58339] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ccureiti.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ccureiti.com"] [uri "/"] [unique_id "auOYVDyrGG7wH6x9Hi5IMgAAABU"], referer: https://five.co.in/redirect.php?ref_host=cyfrovenawenky.click
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 03:16:16
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:16:11.140872 2026] [security2:error] [pid 32552:tid 3256 ...
show more
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:16:11.140872 2026] [security2:error] [pid 32552:tid 32565] [client 195.91.27.16:7100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||djkirby.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "djkirby.com"] [uri "/"] [unique_id "auAXe18_650mgS9q8xscvgAAAAw"], referer: https://djkirby.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 15:06:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:06:21.240640 2026] [security2:error] [pid 23210:tid 2321 ...
show more
(mod_security) mod_security (id:210350) triggered by 195.91.27.16 (mob-dynamic-16.195-91-27.telekom.sk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:06:21.240640 2026] [security2:error] [pid 23210:tid 23210] [client 195.91.27.16:7660] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||andy-blakk.org|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "andy-blakk.org"] [uri "/"] [unique_id "at4a7ZUN6nxqn0zWRrtMOwAAAAg"], referer: https://acquire.co.in/redirect.php?ref_host=xn--6i0b7xl4fc5m6mhgti.com
show less
Brute-Force
Bad Web Bot
Web App Attack
