🇩🇪
Marc
2026-07-27 10:46:55
(19 hours ago)
104.28.160.253 - - [27/Jul/2026:12:46:52 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 App ...
show more
104.28.160.253 - - [27/Jul/2026:12:46:52 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 104.28.160.253 - - [27/Jul/2026:12:46:55 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 104.28.160.253 - - [27/Jul/2026:12:46:55 +0200] "GET /.gitconfig HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-26 02:11:22
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:11:17.499032 2026] [security2:error] [pid 2365908:tid 2365908] [client 104.28.160.253:12200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||suffolksystems.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "suffolksystems.com"] [uri "/"] [unique_id "amVsxVrhQzzLp_12mOeVxQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 15:35:34
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 11:35:27.686469 2026] [security2:error] [pid 1066777:tid 1066777] [client 104.28.160.253:32738] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||advancedmachininginc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "advancedmachininginc.com"] [uri "/"] [unique_id "amTXv6Hi57wIySeztNkgcwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 11:44:52
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 07:44:48.651229 2026] [security2:error] [pid 1611811:tid 1611811] [client 104.28.160.253:32927] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||hxctechllc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "hxctechllc.com"] [uri "/"] [unique_id "amShsCJGc963xNzG5hdgkAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 10:09:39
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 06:09:31.504336 2026] [security2:error] [pid 2301106:tid 2301106] [client 104.28.160.253:32518] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||sguard.co|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "sguard.co"] [uri "/"] [unique_id "amSLW8BbPR0XxxQwmWhIRwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 05:14:24
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 01:14:16.866102 2026] [security2:error] [pid 1916943:tid 1916947] [client 104.28.160.253:43962] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||andeanbouquet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "andeanbouquet.com"] [uri "/"] [unique_id "amRGKMy9-42JrCUXZml-kAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Marc
2026-07-24 14:19:13
(3 days ago)
104.28.160.253 - - [24/Jul/2026:16:19:13 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 App ...
show more
104.28.160.253 - - [24/Jul/2026:16:19:13 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" 104.28.160.253 - - [24/Jul/2026:16:19:13 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 104.28.160.253 - - [24/Jul/2026:16:19:13 +0200] "GET /.gitconfig HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-24 13:09:10
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 09:09:06.360714 2026] [security2:error] [pid 3808232:tid 3808349] [client 104.28.160.253:9613] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jeflis.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jeflis.com"] [uri "/"] [unique_id "amNj8ooEHmBUfe0z-dscagAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-07-21 21:25:20
(6 days ago)
104.28.160.253 - - [21/Jul/2026:22:25:20 +0100] "GET /ngsw.json HTTP/2.0" 404 224 "-" "Mozilla/5.0 ( ...
show more
104.28.160.253 - - [21/Jul/2026:22:25:20 +0100] "GET /ngsw.json HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇩🇪
Marc
2026-07-21 20:17:27
(6 days ago)
104.28.160.253 - - [21/Jul/2026:22:17:27 +0200] "GET /.gitconfig HTTP/2.0" 404 269 "-" "Mozilla/5.0 ...
show more
104.28.160.253 - - [21/Jul/2026:22:17:27 +0200] "GET /.gitconfig HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" 104.28.160.253 - - [21/Jul/2026:22:17:27 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] " 104.28.160.253 - - [21/Jul/2026:22:17:27 +0200] "GET /.github/workflows/deploy.yml HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; GoogleOther; +http://www.google.com/bot.html)"
show less
Brute-Force
🇳🇱
e.fierstra
2026-07-21 18:02:45
(6 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 06:10:30
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 02:10:24.392506 2026] [security2:error] [pid 3289157:tid 3289157] [client 104.28.160.253:22207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||powerlinemagazine.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "powerlinemagazine.com"] [uri "/"] [unique_id "alxqUFmkGvoauhh3Z3OxDgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 10:22:16
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:22:11.040723 2026] [security2:error] [pid 26294:tid 26294] [client 104.28.160.253:29238] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||spacebooger.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spacebooger.com"] [uri "/"] [unique_id "altT0wjrrd9kShkIgOmEQAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 10:01:41
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 06:01:34.315021 2026] [security2:error] [pid 45939:tid 45939] [client 104.28.160.253:27467] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||informant-systems.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "informant-systems.com"] [uri "/"] [unique_id "altO_n286vVoVXaCGQPmQQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 07:50:39
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.160.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 03:50:31.307719 2026] [security2:error] [pid 17324:tid 17324] [client 104.28.160.253:53536] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thebrotherhoodlounge.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thebrotherhoodlounge.com"] [uri "/"] [unique_id "alswR52nN9YcHHz8AKmUTwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack