🇺🇸
TPI-Abuse
2026-06-02 12:35:03
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 08:34:59.018187 2026] [security2:error] [pid 13202:tid 13202] [client 2a01:4f8:191:81f3::2:52964] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/directory/[email protected] "] [unique_id "ah7N8z8PwotbF87Qb-4VQAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 06:00:17
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 02:00:07.841956 2026] [security2:error] [pid 19850:tid 19850] [client 2a01:4f8:191:81f3::2:40450] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lionheartpublications.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lionheartpublications.com"] [uri "/[email protected] "] [unique_id "ah0f51qFWQxF-xYiXUljEgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-05-28 18:08:13
(1 week ago)
2a01:4f8:191:81f3::2 - - [28/May/2026:19:08:11 +0100] "GET / HTTP/1.1" 403 4984 "-" "serpstatbot/2.1 ...
show more
2a01:4f8:191:81f3::2 - - [28/May/2026:19:08:11 +0100] "GET / HTTP/1.1" 403 4984 "-" "serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/; [email protected] )"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-26 19:40:35
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 15:40:31.822460 2026] [security2:error] [pid 19458:tid 19458] [client 2a01:4f8:191:81f3::2:50218] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pswebsite.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pswebsite.com"] [uri "/goggle.com"] [unique_id "ahX3L4HCmpen1JQ3PYL7AQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 03:13:07
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 23:13:00.812867 2026] [security2:error] [pid 9707:tid 9725] [client 2a01:4f8:191:81f3::2:35294] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dasperformance.com|F|2"] [data ".das performance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/tag/custom-harley-davidson/W WW.DAS performance.com"] [unique_id "af6mPMH8p5FmDdIGGv__xgAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 12:58:30
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 08:58:23.684795 2026] [security2:error] [pid 6379:tid 6379] [client 2a01:4f8:191:81f3::2:59502] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||greenroomonline.org|F|2"] [data ".pvpnwestmont.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "greenroomonline.org"] [uri "/www.pvpnwestmont.com"] [unique_id "afSjb_LN_RIc6s2HqJeVDAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-04-02 11:00:07
(2 months ago)
CrowdSec-Report: crowdsecurity/http-bad-user-agent
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-28 12:57:48
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 08:57:45.272096 2026] [security2:error] [pid 3761:tid 3761] [client 2a01:4f8:191:81f3::2:39450] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||blockadegc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blockadegc.com"] [uri "/blockadegc.com"] [unique_id "acfQSbjZ6g4teWnkJ1p3FgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 15:19:56
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 11:19:51.281854 2026] [security2:error] [pid 16146:tid 16146] [client 2a01:4f8:191:81f3::2:49112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.phantomkennels.com|F|2"] [data "[email protected] "] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.phantomkennels.com"] [uri "/[email protected] "] [unique_id "ab63F92QNIcIjyZkquqzyQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Dennis
2026-02-27 22:02:05
(3 months ago)
2a01:4f8:191:81f3::2 has been banned for triggering http-bad-user-agent (2 events over 947.35µs). Th ...
show more
2a01:4f8:191:81f3::2 has been banned for triggering http-bad-user-agent (2 events over 947.35µs). The user-agent serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/; [email protected] ) is not allowed.
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-10 05:38:13
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 00:38:07.955140 2026] [security2:error] [pid 2743:tid 2743] [client 2a01:4f8:191:81f3::2:37330] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lionheartpublications.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lionheartpublications.com"] [uri "/[email protected] "] [unique_id "aWHlvzELbKeAEaTnfZXZBQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-09 14:48:09
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 09:48:04.342580 2026] [security2:error] [pid 3613:tid 3613] [client 2a01:4f8:191:81f3::2:50000] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/directory/[email protected] "] [unique_id "aWEVJLlrxy1Z79kZ7Wl6TwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-01-09 14:05:37
(4 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-04 12:44:16
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 07:44:09.955721 2026] [security2:error] [pid 24899:tid 24899] [client 2a01:4f8:191:81f3::2:43348] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pswebsite.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pswebsite.com"] [uri "/goggle.com"] [unique_id "aVpgmWPVmAnaICcPEvRetQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-01-04 01:05:40
(5 months ago)
2a01:4f8:191:81f3::2 - - [04/Jan/2026:01:05:25 +0000] "GET / HTTP/1.0" 403 4959 "-" "serpstatbot/2.1 ...
show more
2a01:4f8:191:81f3::2 - - [04/Jan/2026:01:05:25 +0000] "GET / HTTP/1.0" 403 4959 "-" "serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/; [email protected] )"
...
show less
Bad Web Bot