🇺🇸
TPI-Abuse
2026-11-09 12:43:57
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:43:50.614936 2026] [security2:error] [pid 21057:tid 21057] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:43:50.614936 2026] [security2:error] [pid 21057:tid 21057] [client 2a09:bac1:6540:8::19a:1ec:36862] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.limocorpuschristi.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.limocorpuschristi.com"] [uri "/403.shtml"] [unique_id "avHABiqhgP7iFT7z0aREtAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 19:02:49
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:02:44.604839 2026] [security2:error] [pid 29816:tid 29816] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:02:44.604839 2026] [security2:error] [pid 29816:tid 29816] [client 2a09:bac1:6540:8::19a:1ec:15348] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||albertmassaad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "albertmassaad.com"] [uri "/"] [unique_id "avDHVGVLN0pgwFR5e6Kr-wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 13:36:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:36:36.321037 2026] [security2:error] [pid 15041:tid 15041] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:36:36.321037 2026] [security2:error] [pid 15041:tid 15041] [client 2a09:bac1:6540:8::19a:1ec:13622] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joyfulservice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joyfulservice.com"] [uri "/"] [unique_id "avB65I4Ude31hkMgUKHU_AAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:33:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:33:56.920810 2026] [security2:error] [pid 15350:tid 15423] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:33:56.920810 2026] [security2:error] [pid 15350:tid 15423] [client 2a09:bac1:6540:8::19a:1ec:40186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rockabyecotons.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rockabyecotons.com"] [uri "/"] [unique_id "au_7tJjc_VerUKjp55up5AAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 19:56:11
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:56:05.083284 2026] [security2:error] [pid 28575:tid 28575] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:56:05.083284 2026] [security2:error] [pid 28575:tid 28575] [client 2a09:bac1:6540:8::19a:1ec:26082] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bluewireproject.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bluewireproject.com"] [uri "/"] [unique_id "au-CVXJLahnC5xtBWxvAIgAAAD4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 18:33:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:33:47.760787 2026] [security2:error] [pid 25211:tid 25211] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:33:47.760787 2026] [security2:error] [pid 25211:tid 25211] [client 2a09:bac1:6540:8::19a:1ec:22560] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||metrosearchinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "metrosearchinc.com"] [uri "/"] [unique_id "au9vCzOxmpcgWWMMKrm0agAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:44:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:44:38.419701 2026] [security2:error] [pid 1519599:tid 1519623] [client ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:44:38.419701 2026] [security2:error] [pid 1519599:tid 1519623] [client 2a09:bac1:6540:8::19a:1ec:21144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||yakamengen.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "yakamengen.com"] [uri "/"] [unique_id "au9HZoiyVBlPHsSKsYg4NwAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 14:49:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:49:04.149376 2026] [security2:error] [pid 2484:tid 2484] [client 2a09:b ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:49:04.149376 2026] [security2:error] [pid 2484:tid 2484] [client 2a09:bac1:6540:8::19a:1ec:53418] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||barigby.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "barigby.com"] [uri "/"] [unique_id "au86YCLB16OQtmD9cOE25QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 13:50:21
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 08:50:18.432624 2026] [security2:error] [pid 29398:tid 29398] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 08:50:18.432624 2026] [security2:error] [pid 29398:tid 29398] [client 2a09:bac1:6540:8::19a:1ec:14628] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||drwolberg.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "drwolberg.com"] [uri "/"] [unique_id "au8smvlDHPOaz30k8JYnygAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 12:14:27
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:14:22.563446 2026] [security2:error] [pid 28628:tid 28628] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:14:22.563446 2026] [security2:error] [pid 28628:tid 28628] [client 2a09:bac1:6540:8::19a:1ec:21650] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||comfortcartel.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "comfortcartel.com"] [uri "/"] [unique_id "au8WHjQ-3tazl-cfJQ3tGwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 11:55:47
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:55:41.471118 2026] [security2:error] [pid 20002:tid 20002] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac1:6540:8::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:55:41.471118 2026] [security2:error] [pid 20002:tid 20002] [client 2a09:bac1:6540:8::19a:1ec:14172] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.holland-kadaster-registration.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.holland-kadaster-registration.com"] [uri "/403.shtml"] [unique_id "ausdPSjoa7UKLIkwfEpwXQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
