🇺🇸
TPI-Abuse
2026-06-27 02:38:39
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 22:38:32.556592 2026] [security2:error] [pid 8590:tid 8612] [client 149.22.87.33:61409] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||newtrendmag.org|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newtrendmag.org"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aj83qJvSYuZ-J5SN1qWbSAAAAJQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 02:05:46
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 22:05:41.935039 2026] [security2:error] [pid 26157:tid 26157] [client 149.22.87.33:47949] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.idetailingcreatives.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.idetailingcreatives.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aj8v9dVaNVxE5IEH_J-Z6gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 01:43:44
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 21:43:41.538511 2026] [security2:error] [pid 19283:tid 19283] [client 149.22.87.33:23115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pcga.golf|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pcga.golf"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aj8qzZMokAyovr85plLzXAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 01:17:43
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 21:17:37.949253 2026] [security2:error] [pid 22105:tid 22105] [client 149.22.87.33:35279] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.voodooshop.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.voodooshop.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aj8ksSYdqdU_nwpCOpMWuAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 00:17:17
(5 hours ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 20:17:12.765438 2026] [security2:error] [pid 19340:tid 19355] [client 149.22.87.33:34127] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nesso.es|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nesso.es"] [uri "/w/pizzamaster/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aj8WiGlDBCEPM-pNTIXScQAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 19:17:15
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 15:17:11.434061 2026] [security2:error] [pid 1188:tid 1188] [client 149.22.87.33:60631] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thecatandtheowl.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thecatandtheowl.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aj1-txZnfd71FymJLiSNUwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 21:29:50
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 17:29:43.537583 2026] [security2:error] [pid 2702:tid 2702] [client 149.22.87.33:26923] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||radar24hrs.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "radar24hrs.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ajxMR7VfKWu269mmyBJqZgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 02:47:37
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 22:47:33.107032 2026] [security2:error] [pid 12488:tid 12488] [client 149.22.87.33:24601] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.azcrittergetter.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.azcrittergetter.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ajtFRT_5E1PEhnrfhYedKwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 02:29:16
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 22:29:10.754274 2026] [security2:error] [pid 6301:tid 6301] [client 149.22.87.33:31019] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.siragusafamily.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.siragusafamily.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ajtA9qrOvplIInfut64acgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 01:45:30
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 21:45:27.354526 2026] [security2:error] [pid 20523:tid 20523] [client 149.22.87.33:51977] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||victorvictor.biz|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "victorvictor.biz"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ajs2t3XE1cNc0AAp9KtjXwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 00:13:57
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 20:13:52.741786 2026] [security2:error] [pid 32234:tid 32234] [client 149.22.87.33:50443] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||backstore.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "backstore.com"] [uri "/backstore/HumanTouch.htm/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ajshQKHYqatQqXVZ2S1yBgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-06-23 13:02:25
(3 days ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 15:48:42
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:48:37.013361 2026] [security2:error] [pid 8735:tid 8735] [client 149.22.87.33:53893] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||unified-dispatch.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "unified-dispatch.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ai171R9Pfu7pSUuam4C30gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 08:33:54
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:33:47.948807 2026] [security2:error] [pid 3106:tid 3106] [client 149.22.87.33:27105] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vincetronics.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vincetronics.com"] [uri "/google0e1ebbf943a1894d.html/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ai0V60VNt2SO73pA7GB5NAAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 05:12:55
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): ...
show more
(mod_security) mod_security (id:210730) triggered by 149.22.87.33 (unn-149-22-87-33.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 01:12:50.906190 2026] [security2:error] [pid 10400:tid 10400] [client 149.22.87.33:45149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||theradarshop.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "theradarshop.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aiJa0qS90jtyqdUINAXndQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack