🇺🇸
TPI-Abuse
2026-09-12 14:42:15
(12 minutes ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 10:42:07.100543 2026] [security2:error] [pid 12065:tid 12065] [client 42.201.192.44:35451] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kln.jp|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kln.jp"] [uri "/"] [unique_id "aqVkv-K5x_fglsJ-FvsYjQAAABY"], referer: https://five.co.in/redirect.php?ref_host=spacva.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 13:41:52
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 09:41:44.603876 2026] [security2:error] [pid 23234:tid 23234] [client 42.201.192.44:15484] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||untraceable.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "untraceable.org"] [uri "/"] [unique_id "aqVWmEplunfTQ55j76lduwAAAAI"], referer: https://five.co.in/redirect.php?ref_host=dogtrainerstoolbox.org
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-11 14:33:00
(1 day ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
🇺🇸
TPI-Abuse
2026-09-05 16:52:16
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 12:52:08.883239 2026] [security2:error] [pid 25353:tid 25353] [client 42.201.192.44:42190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||creartest.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "creartest.com"] [uri "/hacertests-219593-fuerza.php"] [unique_id "apxIuGAZDT0-rsDCznUGXQAAAAk"], referer: https://creartest.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-30 14:03:04
(1 week ago)
Web attack
Bad Web Bot
Web App Attack
🇫🇷
bigorre.org
2026-08-29 16:45:26
(1 week ago)
unidentified crawl, no bot reference in user agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-29 13:47:03
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 09:46:54.303662 2026] [security2:error] [pid 4933:tid 4933] [client 42.201.192.44:16750] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||circleofsound.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "circleofsound.org"] [uri "/aboutourcircle"] [unique_id "apLizgVvDr5T5HtYyVQywQAAAAI"], referer: https://circleofsound.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 08:46:58
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 04:46:50.585996 2026] [security2:error] [pid 13495:tid 13495] [client 42.201.192.44:49126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||theboates.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "theboates.com"] [uri "/"] [unique_id "apKcena-VyaQJW-brxCFhQAAAAg"], referer: https://southfwb.com/all/2867/24.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 04:38:23
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 00:38:13.995350 2026] [security2:error] [pid 13780:tid 13780] [client 42.201.192.44:39050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||usaangelinvestors.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "usaangelinvestors.com"] [uri "/silicon-valley-angel-investors"] [unique_id "apJiNRbxyCnxTN11VQIBEAAAADA"], referer: https://constructionloansfunding.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
FireGuard Server
2026-08-28 17:05:04
(2 weeks ago)
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=443
Port Scan
Hacking
🇪🇸
Michael McCarthy
2026-08-28 11:14:20
(2 weeks ago)
Web Spam
🇺🇸
TPI-Abuse
2026-08-28 08:11:09
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 04:11:03.073801 2026] [security2:error] [pid 29392:tid 29392] [client 42.201.192.44:15515] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rogerheath.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rogerheath.com"] [uri "/porsche-museum"] [unique_id "apFCl-VQqiUbo3qKbztplQAAAAI"], referer: https://rogerheath.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 07:52:44
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 03:52:35.874156 2026] [security2:error] [pid 12060:tid 12060] [client 42.201.192.44:59098] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||danialias.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "danialias.com"] [uri "/news"] [unique_id "apE-Q0MlhMmEyZ6l2d4ZywAAAAI"], referer: https://nokotoba.blogspot.com/2010/07/classic-usb-pad-bought-in-akihabara-for.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 02:39:05
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 22:38:59.275263 2026] [security2:error] [pid 30726:tid 30726] [client 42.201.192.44:10381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||surviquo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "surviquo.com"] [uri "/"] [unique_id "apD0w2S7VIiVKD-OFS-t_AAAABA"], referer: https://s-tribe.net/all/544/28.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 18:11:10
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:11:06.550931 2026] [security2:error] [pid 20721:tid 20721] [client 42.201.192.44:40695] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||americanlegion935.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "americanlegion935.com"] [uri "/"] [unique_id "apB9uv1WNDRpntpid6PxCQAAAAg"], referer: https://willcountyamericanlegion.org/district
show less
Brute-Force
Bad Web Bot
Web App Attack
