AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User TPI-Abuse joined AbuseIPDB in May 2021 and has reported 10,426,085 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇹🇳 197.238.159.50	6 minutes ago	(mod_security) mod_security (id:210350) triggered by 197.238.159.50 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 197.238.159.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:47.749082 2026] [security2:error] [pid 31221:tid 31295] [client 197.238.159.50:35858] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|boracayboats.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "boracayboats.com"] [uri "/"] [unique_id "auXlj5mH1d_YzuX5Ubpf4QAAAQ8"], referer: https://addurl.in/redirect.php?ref_host=iamraja.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 45.132.184.97	6 minutes ago	(mod_security) mod_security (id:210350) triggered by 45.132.184.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 45.132.184.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:48.186614 2026] [security2:error] [pid 22148:tid 22148] [client 45.132.184.97:29667] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.flavornet.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/1200-67-5.html"] [unique_id "auXlkL8kHrP-2o3XNZBAvgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇩 103.179.60.89	6 minutes ago	(mod_security) mod_security (id:210350) triggered by 103.179.60.89 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 103.179.60.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:48.822245 2026] [security2:error] [pid 27864:tid 27890] [client 103.179.60.89:42134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|boracayglobal.org\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "boracayglobal.org"] [uri "/"] [unique_id "auXlkLralFfBvktEUoYQUQAAABg"], referer: https://addurl.in/redirect.php?ref_host=iamraja.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 31.134.1.54	6 minutes ago	(mod_security) mod_security (id:210730) triggered by 31.134.1.54 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 31.134.1.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:47.750153 2026] [security2:error] [pid 6595:tid 6595] [client 31.134.1.54:21745] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Hudson II/Vermont Bark/Loveseat/originals/Thumbs.db"] [unique_id "auXlj-p3CPKjxw0cF5KfswAAAAM"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hudson%20II/Hudson%20II/Vermont%20Bark/Loveseat/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 194.117.253.222	6 minutes ago	(mod_security) mod_security (id:210350) triggered by 194.117.253.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 194.117.253.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:38.111025 2026] [security2:error] [pid 3286:tid 3286] [client 194.117.253.222:55504] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|cbcfargo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "auXlhjVVL6f1bxzE4DdJegAAAAQ"], referer: https://cbcfargo.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇱 190.5.36.10	6 minutes ago	(mod_security) mod_security (id:225170) triggered by 190.5.36.10 (host190.5.36.10.dynamic.pacificore ... show more (mod_security) mod_security (id:225170) triggered by 190.5.36.10 (host190.5.36.10.dynamic.pacificored.cl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:46.280311 2026] [security2:error] [pid 12840:tid 12840] [client 190.5.36.10:16328] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|boardinjapan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boardinjapan.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auXljp8zI-Lc89Bz56jVoQAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 185.88.100.27	6 minutes ago	(mod_security) mod_security (id:210350) triggered by 185.88.100.27 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 185.88.100.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:46.034790 2026] [security2:error] [pid 22676:tid 22676] [client 185.88.100.27:19947] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.flavornet.org\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.flavornet.org"] [uri "/info/1200-67-5.html"] [unique_id "auXljgZeAeShVg2BUDdnkQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇵 103.146.219.85	6 minutes ago	(mod_security) mod_security (id:225170) triggered by 103.146.219.85 (85.219.146.103.sajilonet.com.np ... show more (mod_security) mod_security (id:225170) triggered by 103.146.219.85 (85.219.146.103.sajilonet.com.np): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:38.979887 2026] [security2:error] [pid 13269:tid 13269] [client 103.146.219.85:58982] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|citizensforsanity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "citizensforsanity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auXlhtoUGbXzfp1PzZ-17wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 35.199.102.24	6 minutes ago	(mod_security) mod_security (id:210492) triggered by 35.199.102.24 (24.102.199.35.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 35.199.102.24 (24.102.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:40.436013 2026] [security2:error] [pid 28366:tid 28366] [client 35.199.102.24:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.sahinozalit.com"] [uri "/.htpasswd"] [unique_id "auXliIGmLlz0KxJpw9xK1AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 179.189.34.88	6 minutes ago	(mod_security) mod_security (id:225080) triggered by 179.189.34.88 (dynamic-179.189.34.88.fbnet.com. ... show more (mod_security) mod_security (id:225080) triggered by 179.189.34.88 (dynamic-179.189.34.88.fbnet.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:34.006957 2026] [security2:error] [pid 9717:tid 9717] [client 179.189.34.88:14330] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|daveware.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daveware.net"] [uri "/wp-includes/js/tinymce/plugins/wpgallery/"] [unique_id "auXlgjmoA9R97pXa9VH3twAAAAI"], referer: http://daveware.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇦 105.155.69.137	6 minutes ago	(mod_security) mod_security (id:225080) triggered by 105.155.69.137 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225080) triggered by 105.155.69.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:37.142333 2026] [security2:error] [pid 6685:tid 6685] [client 105.155.69.137:51192] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|daveware.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "daveware.net"] [uri "/wp-includes/js/tinymce/plugins/wpgallery/"] [unique_id "auXlhQ8h0lBykGMtvigLVQAAAA0"], referer: http://daveware.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 178.20.215.152	6 minutes ago	(mod_security) mod_security (id:210350) triggered by 178.20.215.152 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 178.20.215.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:34.123845 2026] [security2:error] [pid 24024:tid 24034] [client 178.20.215.152:33901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bullfrogspond.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bullfrogspond.com"] [uri "/whitburn/2000wye.htm"] [unique_id "auXlgvXBOw-RHq2F-8kdFAAAAUE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 45.148.234.136	6 minutes ago	(mod_security) mod_security (id:210350) triggered by 45.148.234.136 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 45.148.234.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:32.072168 2026] [security2:error] [pid 24024:tid 24048] [client 45.148.234.136:52365] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bullfrogspond.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bullfrogspond.com"] [uri "/whitburn/2000wye.htm"] [unique_id "auXlgPXBOw-RHq2F-8kdEQAAAU8"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇦 31.166.76.93	6 minutes ago	(mod_security) mod_security (id:225170) triggered by 31.166.76.93 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 31.166.76.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:32.510829 2026] [security2:error] [pid 16380:tid 16380] [client 31.166.76.93:47196] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|boardinjapan.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boardinjapan.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auXlgIn2VCQsvpjIsqUbdwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 187.40.234.212	7 minutes ago	(mod_security) mod_security (id:210492) triggered by 187.40.234.212 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 187.40.234.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:33.838021 2026] [security2:error] [pid 20565:tid 20565] [client 187.40.234.212:60980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ceravolo.net"] [uri "/.env"] [unique_id "auXlgQeB1HpHfvT21azwxwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 176.122.121.193	7 minutes ago	(mod_security) mod_security (id:225170) triggered by 176.122.121.193 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 176.122.121.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:30.276396 2026] [security2:error] [pid 14267:tid 14267] [client 176.122.121.193:57784] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|citizensforsanity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "citizensforsanity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auXlfuIcELLu8K1pjSaszgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇪 87.201.249.191	7 minutes ago	(mod_security) mod_security (id:225170) triggered by 87.201.249.191 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 87.201.249.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:30.961265 2026] [security2:error] [pid 13214:tid 13214] [client 87.201.249.191:44436] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|citizensforsanity.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "citizensforsanity.com"] [uri "/wp-json/wp/v2/users"] [unique_id "auXlfsMyMFBtu9R6vI9sYAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 170.168.99.52	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 170.168.99.52 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 170.168.99.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:27.102560 2026] [security2:error] [pid 15549:tid 15549] [client 170.168.99.52:47025] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bostonlog.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/2013-i-was-there-i-should-write-something/"] [unique_id "auXlewlLSYKvm9ACRAj2aQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 45.135.3.67	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 45.135.3.67 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 45.135.3.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:16.880269 2026] [security2:error] [pid 16927:tid 16927] [client 45.135.3.67:19029] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.bostonlog.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bostonlog.com"] [uri "/2013-i-was-there-i-should-write-something/"] [unique_id "auXlcNevEDHf_0RYPkK8ugAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇪 2.50.32.48	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 2.50.32.48 (bba-2-50-32-48.alshamil.net.ae): 1 ... show more (mod_security) mod_security (id:210350) triggered by 2.50.32.48 (bba-2-50-32-48.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:18.066794 2026] [security2:error] [pid 16380:tid 16380] [client 2.50.32.48:12801] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|strawberryhillchristmas.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strawberryhillchristmas.com"] [uri "/sitemap.rss"] [unique_id "auXlcon2VCQsvpjIsqUbdgAAABs"], referer: https://strawberryhillchristmas.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇪 179.6.164.50	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 179.6.164.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 179.6.164.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:20.552231 2026] [security2:error] [pid 16414:tid 16414] [client 179.6.164.50:31046] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|strawberryhillchristmas.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strawberryhillchristmas.com"] [uri "/sitemap.atom"] [unique_id "auXldFH8OCTVgUbj4tht-QAAACQ"], referer: https://strawberryhillchristmas.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇧🇭 109.161.232.82	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 109.161.232.82 (109-161-232-82.rev.bb.zain.com) ... show more (mod_security) mod_security (id:210350) triggered by 109.161.232.82 (109-161-232-82.rev.bb.zain.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:15.584539 2026] [security2:error] [pid 14267:tid 14267] [client 109.161.232.82:45848] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|strawberryhillchristmas.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strawberryhillchristmas.com"] [uri "/sitemap-1.xml"] [unique_id "auXlb-IcELLu8K1pjSasygAAAAk"], referer: https://strawberryhillchristmas.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇰🇼 37.39.212.131	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 37.39.212.131 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 37.39.212.131 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:13.665890 2026] [security2:error] [pid 10907:tid 10907] [client 37.39.212.131:42028] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|strawberryhillchristmas.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strawberryhillchristmas.com"] [uri "/sitemap_1.xml"] [unique_id "auXlbUsMvCXFtDpqxOXSbgAAAA8"], referer: https://strawberryhillchristmas.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇳🇬 105.113.90.160	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 105.113.90.160 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 105.113.90.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:11.945237 2026] [security2:error] [pid 16710:tid 16710] [client 105.113.90.160:14085] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|strawberryhillchristmas.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "strawberryhillchristmas.com"] [uri "/sitemap1.xml"] [unique_id "auXla24sF6vG1-k7MHnsGgAAACE"], referer: https://strawberryhillchristmas.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 167.253.17.76	7 minutes ago	(mod_security) mod_security (id:210350) triggered by 167.253.17.76 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 167.253.17.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 08:56:03.857084 2026] [security2:error] [pid 5982:tid 5982] [client 167.253.17.76:23389] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|arsenalfordemocracy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/oembed/1.0/embed"] [unique_id "auXlY9jNNk2HLocE88CYgQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack