mihomes - 6:17 pm on Oct 22, 2012 (gmt 0)

Here are some entries from my own ip address in the access log :


myipaddress - - [22/Oct/2012:13:30:16 -0400] "\x16\x03\x01" 501 2008
myipaddress - - [22/Oct/2012:13:30:16 -0400] "\x16\x03\x01" 501 2008
myipaddress - - [22/Oct/2012:13:30:16 -0400] "\x16\x03" 501 2008
myipaddress - - [22/Oct/2012:13:30:16 -0400] "\x16\x03" 501 2008
myipaddress - - [22/Oct/2012:13:32:10 -0400] "\x16\x03\x01" 501 2008
myipaddress - - [22/Oct/2012:13:32:10 -0400] "\x16\x03\x01" 501 2008
myipaddress - - [22/Oct/2012:13:32:10 -0400] "\x16\x03" 501 2008
myipaddress - - [22/Oct/2012:13:32:10 -0400] "\x16\x03" 501 2008
myipaddress - - [22/Oct/2012:13:32:13 -0400] "\x16\x03\x01" 501 2008
myipaddress - - [22/Oct/2012:13:32:13 -0400] "\x16\x03\x01" 501 2008
myipaddress - - [22/Oct/2012:13:32:24 -0400] "\x16\x03" 501 2008
myipaddress - - [22/Oct/2012:13:32:24 -0400] "\x16\x03" 501 2008


this would have happend when I tried to view an https page when there is no ssl.

Modsec then kicked in and my CSF blocked me because of the modsec triggered x times within y timeframe.