🇺🇸
TPI-Abuse
2026-11-09 01:29:31
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:29:27.564142 2026] [security2:error] [pid 12276:tid 12276] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 20:29:27.564142 2026] [security2:error] [pid 12276:tid 12276] [client 2a09:bac5:55fe:1014::19a:1ec:38530] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||macro-astrology.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "macro-astrology.com"] [uri "/"] [unique_id "avEh9xVthTbEjpCBhcpZNgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 20:20:53
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:20:45.832428 2026] [security2:error] [pid 21863:tid 21863] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 15:20:45.832428 2026] [security2:error] [pid 21863:tid 21863] [client 2a09:bac5:55fe:1014::19a:1ec:52328] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sparler.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sparler.com"] [uri "/"] [unique_id "avDZnYc5Or29UlubakaALAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:19:33
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:19:28.835513 2026] [security2:error] [pid 20418:tid 20418] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:19:28.835513 2026] [security2:error] [pid 20418:tid 20418] [client 2a09:bac5:55fe:1014::19a:1ec:45216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||silver-nm.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "silver-nm.com"] [uri "/"] [unique_id "avCvIAcNX_kKI5JS2IpCIQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:11:18
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:11:10.879179 2026] [security2:error] [pid 6966:tid 6966] [client 2a0 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:11:10.879179 2026] [security2:error] [pid 6966:tid 6966] [client 2a09:bac5:55fe:1014::19a:1ec:50836] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||claireashton.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "claireashton.com"] [uri "/"] [unique_id "avCfHkO5xcRRtJMHF9_trAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 14:13:52
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:13:47.324126 2026] [security2:error] [pid 30924:tid 30924] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:13:47.324126 2026] [security2:error] [pid 30924:tid 30924] [client 2a09:bac5:55fe:1014::19a:1ec:44502] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||susansimmons.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "susansimmons.net"] [uri "/"] [unique_id "avCDm70ZYFEb4f_dG1V3-wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:37:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:37:52.430937 2026] [security2:error] [pid 14068:tid 14068] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:37:52.430937 2026] [security2:error] [pid 14068:tid 14068] [client 2a09:bac5:55fe:1014::19a:1ec:50538] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lkabookkeeping.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lkabookkeeping.com"] [uri "/"] [unique_id "avBfEOjk53RhYjgRf9XsCgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:04:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:04:41.846425 2026] [security2:error] [pid 22888:tid 22888] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:04:41.846425 2026] [security2:error] [pid 22888:tid 22888] [client 2a09:bac5:55fe:1014::19a:1ec:46750] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||elessenux.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "elessenux.com"] [uri "/"] [unique_id "avBXSfhPCS1HD5Q5899gOwAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 10:36:22
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:36:19.464695 2026] [security2:error] [pid 3431:tid 3431] [client 2a0 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:36:19.464695 2026] [security2:error] [pid 3431:tid 3431] [client 2a09:bac5:55fe:1014::19a:1ec:15594] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||westoaksurgentcare.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "westoaksurgentcare.com"] [uri "/"] [unique_id "avBQo6vfjbR_chF320DwiQAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:42:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:42:20.436301 2026] [security2:error] [pid 31800:tid 31800] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:42:20.436301 2026] [security2:error] [pid 31800:tid 31800] [client 2a09:bac5:55fe:1014::19a:1ec:21092] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||icsubb.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "icsubb.com"] [uri "/"] [unique_id "au_hjHCRVGIN-UORSd-hIwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:59:20
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:59:11.729032 2026] [security2:error] [pid 26372:tid 26372] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:59:11.729032 2026] [security2:error] [pid 26372:tid 26372] [client 2a09:bac5:55fe:1014::19a:1ec:35376] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||qualtacon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "qualtacon.com"] [uri "/"] [unique_id "au_JXyuumqpEtfS1-FR9tQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 19:30:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:29:57.282229 2026] [security2:error] [pid 3479:tid 3479] [client 2a0 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:29:57.282229 2026] [security2:error] [pid 3479:tid 3479] [client 2a09:bac5:55fe:1014::19a:1ec:52972] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tigerpathteam.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tigerpathteam.org"] [uri "/"] [unique_id "au98Nd8-CQDoc7Kb8-Y2_QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 18:43:10
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:43:04.580187 2026] [security2:error] [pid 11792:tid 11792] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:43:04.580187 2026] [security2:error] [pid 11792:tid 11792] [client 2a09:bac5:55fe:1014::19a:1ec:23718] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ospreylake.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ospreylake.org"] [uri "/"] [unique_id "au9xOE43MoCNSVxpRPXdoAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 18:22:34
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:22:28.325799 2026] [security2:error] [pid 21099:tid 21099] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:22:28.325799 2026] [security2:error] [pid 21099:tid 21099] [client 2a09:bac5:55fe:1014::19a:1ec:24378] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||marinestorage.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "marinestorage.com"] [uri "/"] [unique_id "au9sZBE8vPoG8O0Qg1g2HgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 16:43:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:43:21.370944 2026] [security2:error] [pid 27735:tid 27735] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 11:43:21.370944 2026] [security2:error] [pid 27735:tid 27735] [client 2a09:bac5:55fe:1014::19a:1ec:29638] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||janton.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "janton.com"] [uri "/"] [unique_id "au9VKUI1UXAzEgVKhXloRgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:28:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:28:35.137862 2026] [security2:error] [pid 16051:tid 16087] [client 2 ...
show more
(mod_security) mod_security (id:210350) triggered by 2a09:bac5:55fe:1014::19a:1ec (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:28:35.137862 2026] [security2:error] [pid 16051:tid 16087] [client 2a09:bac5:55fe:1014::19a:1ec:43004] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kcscomputer.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kcscomputer.com"] [uri "/"] [unique_id "au9Do2rfAmPKQhSVrWdvEwAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
