2026-11-06 04:30:43
UTC ·
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸
TPI-Abuse
2026-10-15 04:59:48
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:59:41.505950 2026] [security2:error] [pid 12103:tid 12103] [client 104.28.161.2:38664] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:59:41.505950 2026] [security2:error] [pid 12103:tid 12103] [client 104.28.161.2:38664] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||joshi.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "joshi.us"] [uri "/"] [unique_id "atBdvS90V6hPaMqw_AaseAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 04:44:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:44:27.512108 2026] [security2:error] [pid 3678:tid 3678] [client 104.28.161.2:39811] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:44:27.512108 2026] [security2:error] [pid 3678:tid 3678] [client 104.28.161.2:39811] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||reparcol.es|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "reparcol.es"] [uri "/"] [unique_id "atBaK_fUYZwztzd2aulAIgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-05 17:46:49
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 13:46:41.754197 2026] [security2:error] [pid 15857:tid 15857] [client 104.28.161.2:55051] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 13:46:41.754197 2026] [security2:error] [pid 15857:tid 15857] [client 104.28.161.2:55051] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "powerkiteforum.com"] [uri "/"] [unique_id "asPigZQmGlGYY3z_lAWXSQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 11:59:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:59:20.381076 2026] [security2:error] [pid 1656:tid 1656] [client 104.28.161.2:41786] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 07:59:20.381076 2026] [security2:error] [pid 1656:tid 1656] [client 104.28.161.2:41786] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||belgium-boat-registration.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "belgium-boat-registration.com"] [uri "/"] [unique_id "asI_mOUmUwBC2Rui79GUOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 15:54:53
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 11:54:46.793956 2026] [security2:error] [pid 29474:tid 29474] [client 104.28.161.2:24433] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 11:54:46.793956 2026] [security2:error] [pid 29474:tid 29474] [client 104.28.161.2:24433] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||craftcare.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "craftcare.net"] [uri "/"] [unique_id "araZRrb_Q7cWYGC27mG5uwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 09:41:28
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 05:41:24.326671 2026] [security2:error] [pid 12218:tid 12218] [client 104.28.161.2:22105] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 05:41:24.326671 2026] [security2:error] [pid 12218:tid 12218] [client 104.28.161.2:22105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||javierreinoso.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "javierreinoso.com"] [uri "/"] [unique_id "arZBxLZKfODwZyNsjdhKhQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 16:23:31
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 12:23:25.306183 2026] [security2:error] [pid 31263:tid 31324] [client 104.28.161.2:48216] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 12:23:25.306183 2026] [security2:error] [pid 31263:tid 31324] [client 104.28.161.2:48216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||psychclinicforchange.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "psychclinicforchange.com"] [uri "/"] [unique_id "arP8_V0YyLB3UFtdyuRxggAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 16:10:10
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 12:10:07.157368 2026] [security2:error] [pid 2171:tid 2171] [client 104.28.161.2:54779] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 12:10:07.157368 2026] [security2:error] [pid 2171:tid 2171] [client 104.28.161.2:54779] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tell-me-first.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tell-me-first.com"] [uri "/"] [unique_id "aqwQ3-Xeys0e73vspwaG4QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 03:50:37
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:50:32.132278 2026] [security2:error] [pid 16792:tid 16792] [client 104.28.161.2:63748] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:50:32.132278 2026] [security2:error] [pid 16792:tid 16792] [client 104.28.161.2:63748] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kraftrentals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kraftrentals.com"] [uri "/"] [unique_id "aqtjiDjVBQ0A_c4brdgtWgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 19:01:16
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:01:12.068841 2026] [security2:error] [pid 17684:tid 17684] [client 104.28.161.2:31559] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:01:12.068841 2026] [security2:error] [pid 17684:tid 17684] [client 104.28.161.2:31559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||k2servicesinc.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "k2servicesinc.net"] [uri "/"] [unique_id "aqrneMtUv1MP7S-8p7lHXAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 10:49:17
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:49:12.943420 2026] [security2:error] [pid 2697:tid 2697] [client 104.28.161.2:23277] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:49:12.943420 2026] [security2:error] [pid 2697:tid 2697] [client 104.28.161.2:23277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tmcbizdev.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tmcbizdev.com"] [uri "/"] [unique_id "aqkiqOY1j6y-RHZsnGIlDQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 19:33:00
UTC ·
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 15:32:54.860063 2026] [security2:error] [pid 11075:tid 11075] [client 104.28.161.2:21283] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 15:32:54.860063 2026] [security2:error] [pid 11075:tid 11075] [client 104.28.161.2:21283] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||damonmarks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "damonmarks.com"] [uri "/"] [unique_id "aqMF5jukBwPuaE9oPljAqwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 12:42:52
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 08:42:46.417961 2026] [security2:error] [pid 22178:tid 22265] [client 104.28.161.2:54916] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 08:42:46.417961 2026] [security2:error] [pid 22178:tid 22265] [client 104.28.161.2:54916] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||julianositalianrestaurant.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "julianositalianrestaurant.com"] [uri "/"] [unique_id "apwORghRfwNe3j-HxSxamwAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 12:06:45
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 08:06:39.732552 2026] [security2:error] [pid 14104:tid 14104] [client 104.28.161.2:54885] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 08:06:39.732552 2026] [security2:error] [pid 14104:tid 14104] [client 104.28.161.2:54885] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||scala-global.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "scala-global.com"] [uri "/"] [unique_id "apwFz1NGihVrb5VZrJK7BAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
