🇺🇸
TPI-Abuse
2026-11-08 17:46:23
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:46:18.618443 2026] [security2:error] [pid 29051:tid 29051] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:46:18.618443 2026] [security2:error] [pid 29051:tid 29051] [client 2a09:bac5:3805:1f19::319:9d:47754] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kelvinlouie.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kelvinlouie.com"] [uri "/"] [unique_id "avC1ajY0JKrtP74Xrb2RrAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 14:37:19
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:37:15.551183 2026] [security2:error] [pid 2386:tid 2386] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:37:15.551183 2026] [security2:error] [pid 2386:tid 2386] [client 2a09:bac5:3805:1f19::319:9d:44604] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aspotoftea.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aspotoftea.com"] [uri "/"] [unique_id "avCJGyefaD_Ktp0-K0HhAwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 13:23:31
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:23:23.486285 2026] [security2:error] [pid 29407:tid 29407] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:23:23.486285 2026] [security2:error] [pid 29407:tid 29407] [client 2a09:bac5:3805:1f19::319:9d:46888] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mpservice.com.sv|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mpservice.com.sv"] [uri "/"] [unique_id "avB3y4tqspA6jzRlJE0vgQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:22:39
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:22:35.520760 2026] [security2:error] [pid 15468:tid 15468] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:22:35.520760 2026] [security2:error] [pid 15468:tid 15468] [client 2a09:bac5:3805:1f19::319:9d:16618] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||niximperial.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "niximperial.com"] [uri "/"] [unique_id "au_5C0zYXCqCTiNwzAlydwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 03:36:29
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:36:23.383292 2026] [security2:error] [pid 17821:tid 17821] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 22:36:23.383292 2026] [security2:error] [pid 17821:tid 17821] [client 2a09:bac5:3805:1f19::319:9d:10280] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||intermixx.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "intermixx.com"] [uri "/"] [unique_id "au_uN_xVe0euf5Y0kzNFowAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:49:54
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:49:53.325262 2026] [security2:error] [pid 9909:tid 9909] [client 2a09 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:49:53.325262 2026] [security2:error] [pid 9909:tid 9909] [client 2a09:bac5:3805:1f19::319:9d:14838] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sfee.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sfee.info"] [uri "/"] [unique_id "au_jUeN1qh60Sf-dYFbh4wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:18:54
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:18:51.174451 2026] [security2:error] [pid 11972:tid 11972] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:18:51.174451 2026] [security2:error] [pid 11972:tid 11972] [client 2a09:bac5:3805:1f19::319:9d:26254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pharmasalesconnect.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pharmasalesconnect.com"] [uri "/"] [unique_id "au-_66U0gogJdy5h6iF2qgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 23:38:35
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:38:32.240064 2026] [security2:error] [pid 18633:tid 18633] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:38:32.240064 2026] [security2:error] [pid 18633:tid 18633] [client 2a09:bac5:3805:1f19::319:9d:49392] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hawleyrentals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hawleyrentals.com"] [uri "/"] [unique_id "au-2eBUsoJ32AT0mCTTdlAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 14:40:31
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:40:25.387862 2026] [security2:error] [pid 29663:tid 29663] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:40:25.387862 2026] [security2:error] [pid 29663:tid 29663] [client 2a09:bac5:3805:1f19::319:9d:22558] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||matteozacchino.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "matteozacchino.com"] [uri "/"] [unique_id "au84WV_Aer48iKiYYaPvVQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 14:12:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:12:55.074479 2026] [security2:error] [pid 15933:tid 15933] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:12:55.074479 2026] [security2:error] [pid 15933:tid 15933] [client 2a09:bac5:3805:1f19::319:9d:9980] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rame-int.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rame-int.com"] [uri "/403.shtml"] [unique_id "au8x5y14gbArSWBW8YtKjgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 09:15:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:15:27.911695 2026] [security2:error] [pid 16595:tid 16595] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:15:27.911695 2026] [security2:error] [pid 16595:tid 16595] [client 2a09:bac5:3805:1f19::319:9d:11202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kln.ne.jp|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kln.ne.jp"] [uri "/"] [unique_id "au7sLy5vYZE6BF7Lhf8ZxQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 12:57:37
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:57:31.495975 2026] [security2:error] [pid 17885:tid 17885] [client 2a ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:3805:1f19::319:9d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:57:31.495975 2026] [security2:error] [pid 17885:tid 17885] [client 2a09:bac5:3805:1f19::319:9d:47918] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dividivipartners.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dividivipartners.com"] [uri "/"] [unique_id "au3Ou7JrZnLV3g2gFeq_ywAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
