🇺🇸
TPI-Abuse
2026-11-13 17:29:59
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:29:54.056559 2026] [security2:error] [pid 9789:tid 9789] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:29:54.056559 2026] [security2:error] [pid 9789:tid 9789] [client 2a01:4f8:173:1bc2::2:52720] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||achildsspace.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "achildsspace.com"] [uri "/https:/directnic.com"] [unique_id "avdJEhgC-26Mz1JJUpzKKwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 16:28:39
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:28:30.757715 2026] [security2:error] [pid 9402:tid 9402] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:28:30.757715 2026] [security2:error] [pid 9402:tid 9402] [client 2a01:4f8:173:1bc2::2:56762] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mylitta.com|F|2"] [data ".googleapis.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mylitta.com"] [uri "/https:/fonts.googleapis.com"] [unique_id "avc6rm8c-2Et4cFQwq9MEAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 15:00:46
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:00:38.570058 2026] [security2:error] [pid 3558:tid 3558] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 10:00:38.570058 2026] [security2:error] [pid 3558:tid 3558] [client 2a01:4f8:173:1bc2::2:45728] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.caferutadelaseda.com|F|2"] [data ".googleapis.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.caferutadelaseda.com"] [uri "/https:/fonts.googleapis.com"] [unique_id "avcmFjwCuzZuqE8ym1IpfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:23:27
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:23:22.439651 2026] [security2:error] [pid 1143:tid 1143] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:23:22.439651 2026] [security2:error] [pid 1143:tid 1143] [client 2a01:4f8:173:1bc2::2:35154] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.banis-associates.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.banis-associates.com"] [uri "/https:/directnic.com"] [unique_id "avYEGtyxNeSa3wwuv4Tc6QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:07:47
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:07:38.785487 2026] [security2:error] [pid 11760:tid 11760] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:07:38.785487 2026] [security2:error] [pid 11760:tid 11760] [client 2a01:4f8:173:1bc2::2:40486] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.esquema-arch.com|F|2"] [data ".googleapis.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.esquema-arch.com"] [uri "/https:/fonts.googleapis.com"] [unique_id "avYAasRWX0ChefOrzVWeSAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:23:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:22:58.806819 2026] [security2:error] [pid 11490:tid 11500] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:22:58.806819 2026] [security2:error] [pid 11490:tid 11500] [client 2a01:4f8:173:1bc2::2:53420] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.geegeefive.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.geegeefive.com"] [uri "/https:/directnic.com"] [unique_id "avX18pFLKRAGzK4gv9l7kQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:00:39
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:00:36.130099 2026] [security2:error] [pid 13902:tid 13902] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:00:36.130099 2026] [security2:error] [pid 13902:tid 13902] [client 2a01:4f8:173:1bc2::2:55866] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.carolinafootprints.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.carolinafootprints.com"] [uri "/https:/directnic.com"] [unique_id "avXwtIDLdfqhEgk8Hg6mHAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 09:21:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:21:32.404105 2026] [security2:error] [pid 3829:tid 3829] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:21:32.404105 2026] [security2:error] [pid 3829:tid 3829] [client 2a01:4f8:173:1bc2::2:60192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||OCEANICPIER.COM|F|2"] [data ".wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oceanicpier.com"] [uri "/https:/oceanicpier.wordpress.com"] [unique_id "avWFHNg870H1l2kZft5_SwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 08:31:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:31:00.595253 2026] [security2:error] [pid 16482:tid 16588] [client 2a01:4f8: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 03:31:00.595253 2026] [security2:error] [pid 16482:tid 16588] [client 2a01:4f8:173:1bc2::2:50098] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||npaccountants.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "npaccountants.org"] [uri "/https:/directnic.com"] [unique_id "avV5RGEdzFtZfe2JQo4gwwAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 08:03:36
UTC ·
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:03:29.601761 2026] [security2:error] [pid 8581:tid 8581] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:03:29.601761 2026] [security2:error] [pid 8581:tid 8581] [client 2a01:4f8:173:1bc2::2:46002] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ralserve.net|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ralserve.net"] [uri "/https:/handi-finder.com"] [unique_id "avQhUfhuGciY2-KwhJ0LmgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HandyTreff.de
2026-11-11 00:28:37
UTC ·
(3 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -30.495 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101 Firefox/26.0
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-14 20:03:24
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:03:20.387718 2026] [security2:error] [pid 3440:tid 3440] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:03:20.387718 2026] [security2:error] [pid 3440:tid 3440] [client 2a01:4f8:173:1bc2::2:53068] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.jeremy-olson.com|F|2"] [data ".jeremy-olson.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.jeremy-olson.com"] [uri "/meetings.html/https:/www.jeremy-olson.com"] [unique_id "as_gCAO4RKx_HuL2Qiac5AAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-13 08:21:49
UTC ·
(1 month ago)
Try to access /https://www.hout-cv.eu/xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 11:40:08
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:40:04.324706 2026] [security2:error] [pid 2947:tid 2959] [client 2a01:4f8:17 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:173:1bc2::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:40:04.324706 2026] [security2:error] [pid 2947:tid 2959] [client 2a01:4f8:173:1bc2::2:43482] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mdbscommercialcleaning.com|F|2"] [data ".theproducers.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mdbscommercialcleaning.com"] [uri "/https:/www.theproducers.com"] [unique_id "aszHFGHDypRFU_1EJ56XiQAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-10 20:31:32
UTC ·
(1 month ago)
excessive HTTP 404 errors
Bad Web Bot
