🇺🇸
TPI-Abuse
2026-11-09 05:41:45
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:41:37.006897 2026] [security2:error] [pid 23444:tid 23444] [client 104.28.161.1:18758] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:41:37.006897 2026] [security2:error] [pid 23444:tid 23444] [client 104.28.161.1:18758] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ecomim.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ecomim.com"] [uri "/"] [unique_id "avFdERRgcji97SXYyLPgkgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:59:46
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:59:38.759317 2026] [security2:error] [pid 15696:tid 15696] [client 104.28.161.1:28676] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:59:38.759317 2026] [security2:error] [pid 15696:tid 15696] [client 104.28.161.1:28676] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arofish.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arofish.us"] [uri "/"] [unique_id "arLsOvXHdTfHHGWucoh0dwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:43:38
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:43:33.424028 2026] [security2:error] [pid 11256:tid 11308] [client 104.28.161.1:13147] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:43:33.424028 2026] [security2:error] [pid 11256:tid 11308] [client 104.28.161.1:13147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nopictures.productions|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nopictures.productions"] [uri "/"] [unique_id "aq_jBQuggv6v3hsMMRy3PwAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 21:59:20
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 17:59:15.512440 2026] [security2:error] [pid 4945:tid 4945] [client 104.28.161.1:51432] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 17:59:15.512440 2026] [security2:error] [pid 4945:tid 4945] [client 104.28.161.1:51432] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rotentendales.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rotentendales.com"] [uri "/"] [unique_id "aq20M-zPIKSsPpsiletEOgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 20:26:33
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:26:27.434188 2026] [security2:error] [pid 31489:tid 31489] [client 104.28.161.1:52147] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:26:27.434188 2026] [security2:error] [pid 31489:tid 31489] [client 104.28.161.1:52147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||handyrehab.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "handyrehab.com"] [uri "/"] [unique_id "aq2ec31yMUB7SMBy-Pni0QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 23:09:23
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 19:09:17.868780 2026] [security2:error] [pid 23894:tid 23894] [client 104.28.161.1:46123] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 19:09:17.868780 2026] [security2:error] [pid 23894:tid 23894] [client 104.28.161.1:46123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||swurgentvet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "swurgentvet.com"] [uri "/"] [unique_id "aqctHYbcNhtMCpikwibZtgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 17:20:20
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 13:20:17.414747 2026] [security2:error] [pid 28388:tid 28420] [client 104.28.161.1:59904] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 13:20:17.414747 2026] [security2:error] [pid 28388:tid 28420] [client 104.28.161.1:59904] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aapmglobal.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aapmglobal.com"] [uri "/"] [unique_id "aqQ4UazhOc0z3Ld63n0ieAAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 12:34:19
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 08:34:14.529996 2026] [security2:error] [pid 18800:tid 18800] [client 104.28.161.1:20788] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 08:34:14.529996 2026] [security2:error] [pid 18800:tid 18800] [client 104.28.161.1:20788] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mjgraphics.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mjgraphics.net"] [uri "/"] [unique_id "aqKjxgmAO2-6N-DGnF5pawAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 05:26:45
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 01:26:40.959212 2026] [security2:error] [pid 10281:tid 10281] [client 104.28.161.1:50000] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 01:26:40.959212 2026] [security2:error] [pid 10281:tid 10281] [client 104.28.161.1:50000] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||danharrisphotoart.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "danharrisphotoart.com"] [uri "/"] [unique_id "aqI_kL5Rc1jg2bQBDajNIAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 04:40:42
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 00:40:37.912839 2026] [security2:error] [pid 30882:tid 30882] [client 104.28.161.1:49838] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 00:40:37.912839 2026] [security2:error] [pid 30882:tid 30882] [client 104.28.161.1:49838] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||netguard.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "netguard.us"] [uri "/"] [unique_id "aqI0xZUPR8jxmsVxYsR22wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 04:03:34
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 00:03:27.507040 2026] [security2:error] [pid 12716:tid 12716] [client 104.28.161.1:49914] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 00:03:27.507040 2026] [security2:error] [pid 12716:tid 12716] [client 104.28.161.1:49914] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||canadianwildlifemuseum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "canadianwildlifemuseum.com"] [uri "/"] [unique_id "aqIsDxuCqWCIuKhf3YxWAwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:35:13
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:35:06.307572 2026] [security2:error] [pid 20715:tid 20715] [client 104.28.161.1:57277] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:35:06.307572 2026] [security2:error] [pid 20715:tid 20715] [client 104.28.161.1:57277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||teenybikini.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "teenybikini.com"] [uri "/"] [unique_id "apYdunKnk0rEWk_2wCjwjQAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 06:00:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 02:00:50.705033 2026] [security2:error] [pid 10493:tid 10493] [client 104.28.161.1:48742] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 02:00:50.705033 2026] [security2:error] [pid 10493:tid 10493] [client 104.28.161.1:48742] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.josephshv.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.josephshv.com"] [uri "/"] [unique_id "apJ1kp3w-DxpIBhNDYUFaAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 05:33:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 01:33:44.036328 2026] [security2:error] [pid 29727:tid 29727] [client 104.28.161.1:50153] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 01:33:44.036328 2026] [security2:error] [pid 29727:tid 29727] [client 104.28.161.1:50153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||unified-dispatch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "unified-dispatch.com"] [uri "/"] [unique_id "apJvOPXv_0OD65yxUaKKBAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 04:30:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 00:30:51.162149 2026] [security2:error] [pid 15463:tid 15463] [client 104.28.161.1:48790] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 00:30:51.162149 2026] [security2:error] [pid 15463:tid 15463] [client 104.28.161.1:48790] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||glentraeger.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "glentraeger.com"] [uri "/"] [unique_id "apJge_OL-MqNP5WQ7UUn8gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
