🇺🇸
TPI-Abuse
2026-06-04 17:22:06
(3 hours ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 13:22:02.073187 2026] [security2:error] [pid 18891:tid 18891] [client 64.62.191.121:63860] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.donutlocations.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.donutlocations.com"] [uri "/img/roccos-cone.jpg"] [unique_id "aiG0OqVENTOeGCgbGiiykwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 13:50:09
(6 hours ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 09:50:04.820354 2026] [security2:error] [pid 19116:tid 19116] [client 64.62.191.121:2220] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.liverpoolfootballprogrammes.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.liverpoolfootballprogrammes.com"] [uri "/media/catalog/product/cache/e1ec5ebb33a14c2f9253a7a05972db8f/a/r/Arsenal-Liverpool-02.04.08-FullTimeReport_1.jpg"] [unique_id "aiGCjN3hcB3u8XOwJB64HgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-06-04 08:00:12
(12 hours ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-04 06:06:38
(14 hours ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 02:06:32.707068 2026] [security2:error] [pid 4051:tid 4051] [client 64.62.191.121:52518] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||watermarks.info|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "watermarks.info"] [uri "/jpg/fourstar.jpg"] [unique_id "aiEV6PQjMJvxk1sd5xO1jgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 18:36:30
(1 day ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 14:36:23.552687 2026] [security2:error] [pid 32099:tid 32119] [client 64.62.191.121:48142] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||pref-realestate.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "pref-realestate.com"] [uri "/wp-content/uploads/2021/01/mp-unit-b-8-300x200.jpg"] [unique_id "aiB0J8rfM9n-PLoeJgUXBwAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-03 11:51:33
(1 day ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 07:51:26.709885 2026] [security2:error] [pid 11953:tid 11953] [client 64.62.191.121:25442] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||fashionmenswear.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "fashionmenswear.com"] [uri "/store/media/catalog/product/cache/1/small_image/400x525/9df78eab33525d08d6e5fb8d27136e95/3/9/3961_orig.jpg"] [unique_id "aiAVPiR1AxMMcmnVEbSzxAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 09:02:46
(2 days ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 05:02:42.364861 2026] [security2:error] [pid 18959:tid 18959] [client 64.62.191.121:62714] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||carolinafootprints.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "carolinafootprints.com"] [uri "/wp-content/uploads/2014/02/14_Jan_30_SnowHorse09_cf.jpg"] [unique_id "ah6cMqB12IBGBzVb-YHv6gAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 05:49:13
(2 days ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 01:49:07.263036 2026] [security2:error] [pid 28980:tid 29040] [client 64.62.191.121:30522] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||earthtravel.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "earthtravel.net"] [uri "/dog/wp-content/uploads/2007/11/breeding-preg.jpg"] [unique_id "ah5u0z6GOpaoaFxrxrLZ0AAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 16:27:32
(3 days ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 12:27:24.527057 2026] [security2:error] [pid 10464:tid 10464] [client 64.62.191.121:50940] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||goseethenurse.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "goseethenurse.com"] [uri "/wp-content/uploads/2017/12/dermnet_photo_of_ringworm_on_scalp-300x204.jpg"] [unique_id "ah2y7HKZbxPk4_M1XAJvHgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 22:28:05
(3 weeks ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 18:28:01.922671 2026] [security2:error] [pid 26011:tid 26011] [client 64.62.191.121:17352] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||circleway.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "circleway.org"] [uri "/images/joy-of-caring-for-children.jpg"] [unique_id "af-08ZkzSZC8BvecJ6eLXQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 19:30:21
(3 weeks ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 15:30:17.066512 2026] [security2:error] [pid 17505:tid 17529] [client 64.62.191.121:28156] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||icecc.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "icecc.com"] [uri "/images/Quality-Cert.-ISO-9001-2008.png"] [unique_id "af-LSZNOH0o5dbOtVV81JQAAAZU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 13:25:25
(3 weeks ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 09:25:19.195346 2026] [security2:error] [pid 28283:tid 28283] [client 64.62.191.121:4730] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.naturephotographyadventures.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.naturephotographyadventures.com"] [uri "/blog/wp-content/uploads/2013/07/ic13_interior9720bh600.jpg"] [unique_id "af3kP-NJ9wE4g7NaK1ZTSwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 09:15:30
(3 weeks ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:15:25.687960 2026] [security2:error] [pid 24411:tid 24411] [client 64.62.191.121:64194] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||r-390.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "r-390.com"] [uri "/r390Mbottom.jpg"] [unique_id "af2prRKo_h-ztudGOeLh7wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 22:22:06
(3 weeks ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 18:21:59.444294 2026] [security2:error] [pid 27033:tid 27033] [client 64.62.191.121:16732] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||wmionline.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "wmionline.org"] [uri "/images/expansion/2014-2.jpg"] [unique_id "af0Qh76z3-p0KeJeW7JFZQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 17:05:53
(4 weeks ago)
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 64.62.191.121 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:05:15.962956 2026] [security2:error] [pid 15394:tid 15394] [client 64.62.191.121:35944] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||cyclingboardgames.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cyclingboardgames.net"] [uri "/images2/tourinauen5.jpg"] [unique_id "afzGS6CIL-8BAqEiYYcIoAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack