🇺🇸
TPI-Abuse
2026-11-09 13:03:51
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:03:45.655140 2026] [security2:error] [pid 10821:tid 10839] [client 170.168.28.102:44309] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:03:45.655140 2026] [security2:error] [pid 10821:tid 10839] [client 170.168.28.102:44309] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/xrusticoatx3805067"] [unique_id "avHEsfKmWUHsP6Bfd_7XzAAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 08:49:19
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:49:12.182546 2026] [security2:error] [pid 9569:tid 9569] [client 170.168.28.102:51999] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:49:12.182546 2026] [security2:error] [pid 9569:tid 9569] [client 170.168.28.102:51999] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2013/07/olivia-culpo-bikini-pictures/"] [unique_id "avGJCMGFhy3c1xNzSVu2swAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:14:48
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:14:44.108133 2026] [security2:error] [pid 25007:tid 25007] [client 170.168.28.102:37667] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:14:44.108133 2026] [security2:error] [pid 25007:tid 25007] [client 170.168.28.102:37667] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/"] [unique_id "avCuBH10JlapTJj0Rh2VcAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 06:30:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:30:24.548000 2026] [security2:error] [pid 4480:tid 4480] [client 170.168.28.102:50885] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 02:30:24.548000 2026] [security2:error] [pid 4480:tid 4480] [client 170.168.28.102:50885] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2016/12/07/dec-7-2016-arsenal-for-democracy-ep-160/"] [unique_id "auQ5gIQZXv3ZnokQ7JRmzQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:46:46
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:46:38.596111 2026] [security2:error] [pid 16478:tid 16478] [client 170.168.28.102:28201] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:46:38.596111 2026] [security2:error] [pid 16478:tid 16478] [client 170.168.28.102:28201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/recstore/m/MidtfynBojaDenmarkUSr.html"] [unique_id "auOUjuxrwK_UCx5n-tXekwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 07:09:54
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 03:09:48.409087 2026] [security2:error] [pid 10011:tid 10011] [client 170.168.28.102:22523] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 03:09:48.409087 2026] [security2:error] [pid 10011:tid 10011] [client 170.168.28.102:22523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||restlesseye.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "restlesseye.com"] [uri "/archive/type-design/typefoundry.html"] [unique_id "atsIPCgDIQy4j8ScJMBtfAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
