🇺🇸
TPI-Abuse
2026-11-10 06:11:12
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:11:08.058650 2026] [security2:error] [pid 2510:tid 2510] [client 89.34.65.229:16979] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:11:08.058650 2026] [security2:error] [pid 2510:tid 2510] [client 89.34.65.229:16979] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.beirutbazar.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.beirutbazar.com"] [uri "/item/swim-in-lbp-172500-usd-115/"] [unique_id "avK1fGHNkpHtuauZf4lkHwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:09:25
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:09:17.829790 2026] [security2:error] [pid 30015:tid 30015] [client 89.34.65.229:51437] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:09:17.829790 2026] [security2:error] [pid 30015:tid 30015] [client 89.34.65.229:51437] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||backsport.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "backsport.com"] [uri "/backstore/about-us.htm"] [unique_id "avHF_YWiyuzX2VJrskBXCAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 20:21:13
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:21:09.256391 2026] [security2:error] [pid 12303:tid 12303] [client 89.34.65.229:59745] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:21:09.256391 2026] [security2:error] [pid 12303:tid 12303] [client 89.34.65.229:59745] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "painting-with-numbers.com"] [uri "/blog/good-communication"] [unique_id "au-INTSOyxCtuZc68_Z5NQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 10:49:26
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:49:19.673177 2026] [security2:error] [pid 30640:tid 30640] [client 89.34.65.229:53629] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:49:19.673177 2026] [security2:error] [pid 30640:tid 30640] [client 89.34.65.229:53629] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/recstore/p/PrinceIgorOBaronWoodr.html"] [unique_id "auxfLyOTVIlyRDcGjvjZWgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:26:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:26:45.709878 2026] [security2:error] [pid 17754:tid 17754] [client 89.34.65.229:23759] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:26:45.709878 2026] [security2:error] [pid 17754:tid 17754] [client 89.34.65.229:23759] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tobyjohnson.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tobyjohnson.com"] [uri "/ron-long-interview.html"] [unique_id "auujFUaqFjcg0omEiTC3VAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 13:32:52
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:32:48.865389 2026] [security2:error] [pid 8795:tid 8795] [client 89.34.65.229:45403] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:32:48.865389 2026] [security2:error] [pid 8795:tid 8795] [client 89.34.65.229:45403] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||realdoctorstories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "realdoctorstories.com"] [uri "/real-doctor-stories/first-workday-in-the-national-health-services-corp/"] [unique_id "auH5gOGtz6JS4iY-D3bsgwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 01:42:10
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:42:03.862058 2026] [security2:error] [pid 7393:tid 7393] [client 89.34.65.229:47025] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:42:03.862058 2026] [security2:error] [pid 7393:tid 7393] [client 89.34.65.229:47025] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thebeeplace.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thebeeplace.com"] [uri "/Contact_Us.htm"] [unique_id "at6v60fqBtTQmgt2JwmHuwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 10:09:19
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:09:05.815507 2026] [security2:error] [pid 29204:tid 29204] [client 89.34.65.229:28297] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 89.34.65.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:09:05.815507 2026] [security2:error] [pid 29204:tid 29204] [client 89.34.65.229:28297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.whodatnation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.whodatnation.com"] [uri "/2009/12/30/no-will-no-way-new-orleans-saints-defensive-end-shouldve-been-overlooked/"] [unique_id "atyDwVbkN86HL_DtCkggcQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-13 03:03:00
UTC ·
(4 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
