🇺🇸
TPI-Abuse
2026-08-26 16:56:19
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:56:11.488852 2026] [security2:error] [pid 13610:tid 13610] [client 42.201.192.16:57203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passy.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passy.us"] [uri "/"] [unique_id "ao8aqwqlI6TYFQSJdlt1iAAAABg"], referer: https://missburrg.com/all/1093/3.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 15:39:27
(5 hours ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 11:39:21.199932 2026] [security2:error] [pid 27218:tid 27218] [client 42.201.192.16:52156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||morninginc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "morninginc.com"] [uri "/projects"] [unique_id "ao8IqfHDowU7amQKligyxAAAABM"], referer: https://morninginc.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 07:08:34
(13 hours ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 03:08:27.579140 2026] [security2:error] [pid 3292:tid 3292] [client 42.201.192.16:37145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||robschouten.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "robschouten.com"] [uri "/"] [unique_id "ao6Q6zvLoJF7OvW_xHmMzQAAAE0"], referer: https://techbumppy.com/all/2474/11.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 13:30:34
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 09:30:27.120961 2026] [security2:error] [pid 14621:tid 14621] [client 42.201.192.16:38600] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garantaconsulting.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garantaconsulting.com"] [uri "/funding-capital"] [unique_id "ao2Y8-xBWGeDWRnZR7avhgAAAAY"], referer: https://garantaconsulting.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 12:44:47
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:44:39.247583 2026] [security2:error] [pid 15682:tid 15682] [client 42.201.192.16:52098] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garantagroup.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garantagroup.com"] [uri "/"] [unique_id "ao2ON7qgqoZPWv4EMNpIiAAAAAM"], referer: https://garantagroup.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 09:31:28
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 05:31:23.913491 2026] [security2:error] [pid 11296:tid 11296] [client 42.201.192.16:32377] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||destructionstudios.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "destructionstudios.com"] [uri "/"] [unique_id "ao1g6_TEpqJZD0HNfL_gxAAAABY"], referer: https://destructionstudios.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 21:11:44
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:11:39.335509 2026] [security2:error] [pid 10423:tid 10423] [client 42.201.192.16:13564] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jalenbattle.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jalenbattle.com"] [uri "/"] [unique_id "aotiCzvporDUQzy4QcedwwAAAAQ"], referer: https://jalenbattle.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-08-23 17:39:02
(3 days ago)
Persistent bad bot: repeated automated abuse detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 13:25:20
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 09:25:13.694323 2026] [security2:error] [pid 1613:tid 1639] [client 42.201.192.16:25296] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||seracon.com.ec|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "seracon.com.ec"] [uri "/manufacturer/jbl"] [unique_id "aor0uTafoLf5b-1lKQ7_ZAAAAEQ"], referer: https://seracon.com.ec/manufacturer/jbl
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 05:42:25
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 01:42:21.042210 2026] [security2:error] [pid 12338:tid 12338] [client 42.201.192.16:50652] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bencramerinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bencramerinc.com"] [uri "/"] [unique_id "aoqIPZl0YmSSBQtc7Wpb4gAAAAE"], referer: https://bencramerinc.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Jochen Pretli
2026-08-22 22:46:11
(3 days ago)
connection to honeypot
Email Spam
Port Scan
🇺🇸
TPI-Abuse
2026-08-22 21:51:58
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 17:51:51.148188 2026] [security2:error] [pid 24045:tid 24045] [client 42.201.192.16:52387] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||royalchess.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "royalchess.net"] [uri "/"] [unique_id "aooZ9zHAzauv4UkFedBysAAAAAY"], referer: https://royalchess.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 02:55:51
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 22:55:46.582746 2026] [security2:error] [pid 18520:tid 18520] [client 42.201.192.16:40308] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tpdtuberental.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tpdtuberental.com"] [uri "/pdfs/TPD_Gift_Orderform.pdf"] [unique_id "aokPsoDVUP4-p6JxxvuXyAAAABE"], referer: http://www.tpdtuberental.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SX Communications
2026-08-18 05:40:33
(1 week ago)
Blocked abusive HTTP application-layer DoS / botnet traffic from 42.201.192.16: traffic from this ad ...
show more
Blocked abusive HTTP application-layer DoS / botnet traffic from 42.201.192.16: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-08-17 22:08:20
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 18:08:14.657649 2026] [security2:error] [pid 32720:tid 32720] [client 42.201.192.16:11685] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jackkerrart.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jackkerrart.com"] [uri "/"] [unique_id "aoOGTqumEIpkf46bbAkn7gAAACY"], referer: https://jackkerrart.com/
show less
Brute-Force
Bad Web Bot
Web App Attack