🇺🇸
TPI-Abuse
2026-11-13 01:31:43
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:31:36.463907 2026] [security2:error] [pid 11504:tid 11504] [client 170.168.28.158:56729] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 20:31:36.463907 2026] [security2:error] [pid 11504:tid 11504] [client 170.168.28.158:56729] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||blogs.melton.space|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blogs.melton.space"] [uri "/pharisee/index.php/2015/01/"] [unique_id "avZoeGerTv67Zn1Ks7zXJAAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 10:31:22
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:31:16.631018 2026] [security2:error] [pid 13304:tid 13304] [client 170.168.28.158:9365] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 05:31:16.631018 2026] [security2:error] [pid 13304:tid 13304] [client 170.168.28.158:9365] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||interartny.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "interartny.com"] [uri "/show12-01.htm"] [unique_id "avLydAHL2c_uqhh1fgoUngAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 09:00:12
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:00:05.073715 2026] [security2:error] [pid 3690:tid 3690] [client 170.168.28.158:34607] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:00:05.073715 2026] [security2:error] [pid 3690:tid 3690] [client 170.168.28.158:34607] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.salinabible.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.salinabible.org"] [uri "/info-articles/thursday-s-thoughts"] [unique_id "avLdFWeJwzCzuqvicC9tgwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 03:47:42
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:47:38.291851 2026] [security2:error] [pid 15921:tid 15921] [client 170.168.28.158:11373] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 22:47:38.291851 2026] [security2:error] [pid 15921:tid 15921] [client 170.168.28.158:11373] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||theateroobleck.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "theateroobleck.com"] [uri "/misc/day-two-our-marathon"] [unique_id "avKT2r3adbRi8COqxwXzcAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:06:30
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:06:26.460953 2026] [security2:error] [pid 4939:tid 4939] [client 170.168.28.158:27523] M ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:06:26.460953 2026] [security2:error] [pid 4939:tid 4939] [client 170.168.28.158:27523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cortona.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cortona.ws"] [uri "/chiesa_domenico_it.html"] [unique_id "au37AprTrtlLciCBW9P0XgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 10:00:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 05:00:54.866020 2026] [security2:error] [pid 27463:tid 27463] [client 170.168.28.158:13221] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 05:00:54.866020 2026] [security2:error] [pid 27463:tid 27463] [client 170.168.28.158:13221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/about.html"] [unique_id "aumw1sExWiwDhQXhPyD4iAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 12:58:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:58:31.010394 2026] [security2:error] [pid 14340:tid 14340] [client 170.168.28.158:64147] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:58:31.010394 2026] [security2:error] [pid 14340:tid 14340] [client 170.168.28.158:64147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/wp-json/wp/v2/tags/673"] [unique_id "auiI90uTTf6pRPq7YaJpqwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 10:37:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:37:35.623095 2026] [security2:error] [pid 19307:tid 19315] [client 170.168.28.158:40665] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:37:35.623095 2026] [security2:error] [pid 19307:tid 19315] [client 170.168.28.158:40665] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||potterpuppetpals.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "potterpuppetpals.com"] [uri "/"] [unique_id "auRzb_Be5bIWRdaUaN8yCwAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 09:35:27
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:35:21.955574 2026] [security2:error] [pid 24410:tid 24410] [client 170.168.28.158:59097] ...
show more
(mod_security) mod_security (id:210350) triggered by 170.168.28.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:35:21.955574 2026] [security2:error] [pid 24410:tid 24410] [client 170.168.28.158:59097] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.esware.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.esware.com"] [uri "/actualizaciones.html"] [unique_id "atSS2Q1BgWB6aRzxjyYuKgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
