🇺🇸
TPI-Abuse
2026-09-14 02:24:53
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 22:24:49.456668 2026] [security2:error] [pid 19258:tid 19258] [client 42.201.192.54:62312] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 22:24:49.456668 2026] [security2:error] [pid 19258:tid 19258] [client 42.201.192.54:62312] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||correlationdesign.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "correlationdesign.com"] [uri "/"] [unique_id "aqda8RKxNJRZLKP-89fslwAAACo"], referer: https://five.co.in/redirect.php?ref_host=hooyd.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 20:05:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 16:05:19.942558 2026] [security2:error] [pid 26200:tid 26200] [client 42.201.192.54:50734] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 16:05:19.942558 2026] [security2:error] [pid 26200:tid 26200] [client 42.201.192.54:50734] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newlifeaccommodation.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newlifeaccommodation.org"] [uri "/"] [unique_id "aqcB_2Z3LODD2ZlgeCw9cgAAAAI"], referer: https://five.co.in/redirect.php?ref_host=roga.one
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 18:37:19
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 14:37:13.181950 2026] [security2:error] [pid 7831:tid 7831] [client 42.201.192.54:16795] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 14:37:13.181950 2026] [security2:error] [pid 7831:tid 7831] [client 42.201.192.54:16795] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||smartradios.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "smartradios.info"] [uri "/"] [unique_id "aqbtWcl_EnsbDUzTyxVQagAAAAM"], referer: https://five.co.in/redirect.php?ref_host=michaelspartyrentals.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 12:07:42
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 08:07:35.944641 2026] [security2:error] [pid 18314:tid 18314] [client 42.201.192.54:23475] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 08:07:35.944641 2026] [security2:error] [pid 18314:tid 18314] [client 42.201.192.54:23475] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.proprocessor.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.proprocessor.com"] [uri "/meat-processing.htm"] [unique_id "aqaSB_HC2oULON8h6vKCyQAAAAI"], referer: https://five.co.in/redirect.php?ref_host=cloked.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 08:36:45
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 04:36:41.589701 2026] [security2:error] [pid 19865:tid 19865] [client 42.201.192.54:32071] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 04:36:41.589701 2026] [security2:error] [pid 19865:tid 19865] [client 42.201.192.54:32071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.eileensharaga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.eileensharaga.com"] [uri "/career_counseling/college-to-career/"] [unique_id "aqZgmdZp513ESELbVCekQQAAAAY"], referer: https://eileensharaga.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 05:01:13
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 01:01:08.667616 2026] [security2:error] [pid 24403:tid 24403] [client 42.201.192.54:16939] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 01:01:08.667616 2026] [security2:error] [pid 24403:tid 24403] [client 42.201.192.54:16939] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wickedworks.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wickedworks.net"] [uri "/"] [unique_id "aqYuFIIPcj3Qe-ix-LZCfwAAAAs"], referer: https://five.co.in/redirect.php?ref_host=bstuokey.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-13 01:55:37
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 21:55:34.585061 2026] [security2:error] [pid 2352333:tid 2352376] [client 42.201.192.54:4390 ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 21:55:34.585061 2026] [security2:error] [pid 2352333:tid 2352376] [client 42.201.192.54:43904] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.tkfay.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.tkfay.com"] [uri "/"] [unique_id "aqYClor23b_J63zEf2VS7wAAAY0"], referer: https://five.co.in/redirect.php?ref_host=jetforce.solutions
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 23:10:27
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 19:10:23.939215 2026] [security2:error] [pid 29258:tid 29258] [client 42.201.192.54:52426] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 19:10:23.939215 2026] [security2:error] [pid 29258:tid 29258] [client 42.201.192.54:52426] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||pamfilyataban.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "pamfilyataban.com"] [uri "/"] [unique_id "aqXb36npXdt09bsEwzOI9gAAAB0"], referer: https://five.co.in/redirect.php?ref_host=southflpeo.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 21:14:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 17:14:34.064876 2026] [security2:error] [pid 12190:tid 12190] [client 42.201.192.54:23552] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 17:14:34.064876 2026] [security2:error] [pid 12190:tid 12190] [client 42.201.192.54:23552] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||johnatuttle.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "johnatuttle.com"] [uri "/alcohol_the-tool.html"] [unique_id "aqXAujPBifL8AnzR4c6NVwAAABA"], referer: https://johnatuttle.us/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 18:37:14
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 14:37:11.405854 2026] [security2:error] [pid 4374:tid 4374] [client 42.201.192.54:62508] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 14:37:11.405854 2026] [security2:error] [pid 4374:tid 4374] [client 42.201.192.54:62508] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||totalhomecarebvi.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "totalhomecarebvi.com"] [uri "/"] [unique_id "aqWb10BwRRtbBRa2JOJd8AAAABk"], referer: https://five.co.in/redirect.php?ref_host=duiattorneysincanada.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 18:15:11
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 14:15:07.799831 2026] [security2:error] [pid 27951:tid 27951] [client 42.201.192.54:30202] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 14:15:07.799831 2026] [security2:error] [pid 27951:tid 27951] [client 42.201.192.54:30202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||unfinishedepic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "unfinishedepic.com"] [uri "/"] [unique_id "aqWWq_peGgEYThHcmWRLxQAAABE"], referer: https://five.co.in/redirect.php?ref_host=svcargo.ru
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
gigatech
2026-09-12 14:15:04
UTC ·
(2 months ago)
Webserver Probing
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 13:58:34
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 09:58:30.087718 2026] [security2:error] [pid 13339:tid 13339] [client 42.201.192.54:45608] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 09:58:30.087718 2026] [security2:error] [pid 13339:tid 13339] [client 42.201.192.54:45608] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||5starfluffandfold.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "5starfluffandfold.com"] [uri "/"] [unique_id "aqVahlLMEFYoIiCG_lP0owAAABc"], referer: https://five.co.in/redirect.php?ref_host=bzv-bechen.de
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 15:16:41
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 11:16:37.478639 2026] [security2:error] [pid 31195:tid 31209] [client 42.201.192.54:53918] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 11:16:37.478639 2026] [security2:error] [pid 31195:tid 31209] [client 42.201.192.54:53918] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||businesscertification.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "businesscertification.org"] [uri "/"] [unique_id "aqQbVbX_LjEnLcXEPGkuigAAAEw"], referer: https://americanacademyofprojectmanagement.com/pagef12c.html?pg=terms
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 20:32:31
UTC ·
(2 months ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:32:26.646457 2026] [security2:error] [pid 17115:tid 17115] [client 42.201.192.54:28644] M ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:32:26.646457 2026] [security2:error] [pid 17115:tid 17115] [client 42.201.192.54:28644] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||templehistorical.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "templehistorical.org"] [uri "/about.html"] [unique_id "apc2Wtud4IQ2aAMxfOdNjwAAAAM"], referer: https://templehistorical.org/
show less
Brute-Force
Bad Web Bot
Web App Attack