🇺🇸
TPI-Abuse
2026-11-10 13:19:32
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:19:25.682125 2026] [security2:error] [pid 3990878:tid 3990897] [client 104.28.161.3:60753] ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:19:25.682125 2026] [security2:error] [pid 3990878:tid 3990897] [client 104.28.161.3:60753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||flapjacktoys.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "flapjacktoys.com"] [uri "/"] [unique_id "avMZ3fqXYNnD4BYgrlUPSAAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 13:02:29
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:02:22.186069 2026] [security2:error] [pid 23778:tid 23778] [client 104.28.161.3:60989] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:02:22.186069 2026] [security2:error] [pid 23778:tid 23778] [client 104.28.161.3:60989] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lognlumber.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lognlumber.com"] [uri "/"] [unique_id "avMV3nmb-YxjxIGZC5yK3wAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:41:42
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:41:37.972572 2026] [security2:error] [pid 5503:tid 5503] [client 104.28.161.3:62079] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:41:37.972572 2026] [security2:error] [pid 5503:tid 5503] [client 104.28.161.3:62079] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tulsatvmemories.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tulsatvmemories.com"] [uri "/"] [unique_id "avMRAS5v7QQiaj8giaciwAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:22:47
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:22:41.768807 2026] [security2:error] [pid 32734:tid 32734] [client 104.28.161.3:62971] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:22:41.768807 2026] [security2:error] [pid 32734:tid 32734] [client 104.28.161.3:62971] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lo-family.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lo-family.org"] [uri "/"] [unique_id "avMMkbAYhmUB0_WUaVRe5AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 11:56:17
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:56:14.796628 2026] [security2:error] [pid 4867:tid 4867] [client 104.28.161.3:60681] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:56:14.796628 2026] [security2:error] [pid 4867:tid 4867] [client 104.28.161.3:60681] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||shivermedia.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "shivermedia.com"] [uri "/"] [unique_id "avMGXl0nBse9_QPuouJBsAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 06:16:12
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:16:05.097617 2026] [security2:error] [pid 8572:tid 8572] [client 104.28.161.3:62339] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 01:16:05.097617 2026] [security2:error] [pid 8572:tid 8572] [client 104.28.161.3:62339] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dewsales.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dewsales.com"] [uri "/"] [unique_id "avK2pTKNpoZCZ0MuTNhY_gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:54:10
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:54:05.337982 2026] [security2:error] [pid 21635:tid 21635] [client 104.28.161.3:61333] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:54:05.337982 2026] [security2:error] [pid 21635:tid 21635] [client 104.28.161.3:61333] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||texasbordertours.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "texasbordertours.com"] [uri "/"] [unique_id "avKxfbANNF3CRBnSfqbeDAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:30:47
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:30:40.782384 2026] [security2:error] [pid 16420:tid 16420] [client 104.28.161.3:62195] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:30:40.782384 2026] [security2:error] [pid 16420:tid 16420] [client 104.28.161.3:62195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gabosoftware.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gabosoftware.com"] [uri "/"] [unique_id "avKsAMvg-uW219f3HyrRAgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 02:12:03
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:11:56.018134 2026] [security2:error] [pid 17213:tid 17213] [client 104.28.161.3:61350] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 21:11:56.018134 2026] [security2:error] [pid 17213:tid 17213] [client 104.28.161.3:61350] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||constructionloansfunding.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "constructionloansfunding.com"] [uri "/"] [unique_id "avJ9bEn_B-LRc1i8n_AMlQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:28:45
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:28:42.255236 2026] [security2:error] [pid 32055:tid 32055] [client 104.28.161.3:61270] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:28:42.255236 2026] [security2:error] [pid 32055:tid 32055] [client 104.28.161.3:61270] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||anniesherbals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "anniesherbals.com"] [uri "/"] [unique_id "avJlOurey1RRmXt7nQd_nAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:08:46
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:08:40.500713 2026] [security2:error] [pid 17885:tid 17885] [client 104.28.161.3:61768] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:08:40.500713 2026] [security2:error] [pid 17885:tid 17885] [client 104.28.161.3:61768] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||allafricaadventures.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "allafricaadventures.com"] [uri "/"] [unique_id "avJgiANlAFavfXNf6m-9_gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:51:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:51:19.094834 2026] [security2:error] [pid 31148:tid 31148] [client 104.28.161.3:62863] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:51:19.094834 2026] [security2:error] [pid 31148:tid 31148] [client 104.28.161.3:62863] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dodojuice.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dodojuice.com"] [uri "/"] [unique_id "avH6B8O_5TlPE9xlLzEwMQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:17:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:17:31.271381 2026] [security2:error] [pid 9734:tid 9734] [client 104.28.161.3:62960] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:17:31.271381 2026] [security2:error] [pid 9734:tid 9734] [client 104.28.161.3:62960] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aangfl.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aangfl.com"] [uri "/"] [unique_id "avHyG3JxxFTc2IYavf3GlwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:03:32
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:03:25.700039 2026] [security2:error] [pid 29233:tid 29233] [client 104.28.161.3:62904] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:03:25.700039 2026] [security2:error] [pid 29233:tid 29233] [client 104.28.161.3:62904] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||riversidecabinswv.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "riversidecabinswv.com"] [uri "/"] [unique_id "avHSrXsm4dHGek1XygMLbQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:38:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:37:54.199897 2026] [security2:error] [pid 27992:tid 27992] [client 104.28.161.3:61101] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 104.28.161.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:37:54.199897 2026] [security2:error] [pid 27992:tid 27992] [client 104.28.161.3:61101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||taxgroupsd.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "taxgroupsd.com"] [uri "/"] [unique_id "avHMsgrgxM2RQxXPCAUPOwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
