🇺🇸
TPI-Abuse
2026-11-12 05:04:11
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:04:07.795998 2026] [security2:error] [pid 2256:tid 2256] [client 89.34.65.18:23737] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 00:04:07.795998 2026] [security2:error] [pid 2256:tid 2256] [client 89.34.65.18:23737] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lmga.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lmga.net"] [uri "/translate/index.php"] [unique_id "avVIx7WUjOfqNBDP0AV9FgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:49:39
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:49:30.281119 2026] [security2:error] [pid 6433:tid 6433] [client 89.34.65.18:9837] ModSecur ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:49:30.281119 2026] [security2:error] [pid 6433:tid 6433] [client 89.34.65.18:9837] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.creartest.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.creartest.com"] [uri "/hacertests-126530-MODERNISMO_Y_GENERACION_DEL_98.php"] [unique_id "avH5moC9G087tbpuOOcx6gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:47:45
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:47:35.901883 2026] [security2:error] [pid 26966:tid 26966] [client 89.34.65.18:33655] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:47:35.901883 2026] [security2:error] [pid 26966:tid 26966] [client 89.34.65.18:33655] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/Stressless-Chair/Stressless-E300-Sofa-Sectional-Longseat-Royalin-TigerEye-Leather.htm"] [unique_id "avF6lwbCMMU2AiqftMyE5QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:39:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:39:37.056652 2026] [security2:error] [pid 14574:tid 14574] [client 89.34.65.18:59193] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:39:37.056652 2026] [security2:error] [pid 14574:tid 14574] [client 89.34.65.18:59193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/news/check-out-the-new-trailer-for-john-wick-chapter-3-parabellum/"] [unique_id "auWpSbLQtL_hZ6bWVx2EigAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-31 04:18:01
UTC ·
(1 week ago)
block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-15 14:22:13
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:22:06.256149 2026] [security2:error] [pid 19969:tid 20013] [client 89.34.65.18:60345] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:22:06.256149 2026] [security2:error] [pid 19969:tid 20013] [client 89.34.65.18:60345] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||linfoulk.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "linfoulk.org"] [uri "/solo_horn/index.html"] [unique_id "atDhjuFCPYb8bMVXL58SFgAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
