🇺🇸
TPI-Abuse
2026-07-17 05:43:40
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:43:33.835841 2026] [security2:error] [pid 29893:tid 29893] [client 42.201.192.72:15431] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||g-peopleland.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "g-peopleland.com"] [uri "/"] [unique_id "alnBBfiMuQc--vXY5yBaAAAAAAg"], referer: https://g-peopleland.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 20:47:19
(12 hours ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:47:16.168756 2026] [security2:error] [pid 18583:tid 18623] [client 42.201.192.72:55515] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||aafm.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "aafm.us"] [uri "/aafmresearch/denmark.html"] [unique_id "allDVMTwxEshJy0GgvUDhQAAARg"], referer: https://aafm.us/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-07-16 11:06:02
(22 hours ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice01]
Hacking
Bad Web Bot
🇬🇧
thetomtaylor.co.uk
2026-07-16 10:08:02
(23 hours ago)
Fail2Ban - [NGINX]Malicious request blocked on nginx-444 ... [ice02,wa01,wa02]
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-16 08:15:30
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 04:15:27.141371 2026] [security2:error] [pid 31591:tid 31683] [client 42.201.192.72:62491] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||rockabyecotons.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "rockabyecotons.com"] [uri "/"] [unique_id "aliTHwiifOWYJSiYV2z-WgAAAQY"], referer: https://rockabyecotons.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 11:38:50
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 07:38:44.174671 2026] [security2:error] [pid 25884:tid 25884] [client 42.201.192.72:54128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-korczak-home.com"] [uri "/bib/uzg/uzg10.html"] [unique_id "aldxRHqIJdEPJk5A8bfl5wAAAAA"], referer: https://jerusalem-korczak-home.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 07:29:24
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 03:29:20.134305 2026] [security2:error] [pid 31891:tid 31891] [client 42.201.192.72:33580] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||timbrazier.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "timbrazier.com"] [uri "/"] [unique_id "alc20KGcynPtqk6qmcZlAwAAABE"], referer: https://timbrazier.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 02:47:23
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:47:16.763041 2026] [security2:error] [pid 20363:tid 20363] [client 42.201.192.72:33933] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||powerkiteforum.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "alb0tIJVxbTJZmEm71NjjgAAAAw"], referer: https://powerkiteforum.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-15 02:05:47
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 22:05:41.283859 2026] [security2:error] [pid 8261:tid 8261] [client 42.201.192.72:35629] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||asociacioncopan.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "asociacioncopan.org"] [uri "/"] [unique_id "albq9SFU5g5f64ewOYppGQAAABQ"], referer: https://asociacioncopan.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 02:19:15
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 22:19:12.195170 2026] [security2:error] [pid 17234:tid 17234] [client 42.201.192.72:41978] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||enchantmenttours.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "enchantmenttours.com"] [uri "/"] [unique_id "alWcoBCf4gMCueFcsZA5ywAAAA4"], referer: https://enchantmenttours.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-13 17:35:30
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 42.201.192.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 13:35:26.155776 2026] [security2:error] [pid 26108:tid 26108] [client 42.201.192.72:11796] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||renjunews.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "renjunews.com"] [uri "/category/highlights"] [unique_id "alUh3rF4IdOyRVqhgs4uvQAAAAU"], referer: https://renjunews.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-07-06 12:55:36
(1 week ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-07-06 11:10:33
(1 week ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇫🇷
bigorre.org
2026-07-06 06:23:41
(1 week ago)
unidentified crawl, no bot reference in user agent
Bad Web Bot
🇺🇸
kosada.com
2026-07-03 05:40:31
(2 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot