🇺🇸
TPI-Abuse
2026-01-09 14:48:09
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 09 09:48:04.342580 2026] [security2:error] [pid 3613:tid 3613] [client 2a01:4f8:191:81f3::2:50000] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/directory/[email protected] "] [unique_id "aWEVJLlrxy1Z79kZ7Wl6TwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-01-09 14:05:37
(9 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-01-04 12:44:16
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 07:44:09.955721 2026] [security2:error] [pid 24899:tid 24899] [client 2a01:4f8:191:81f3::2:43348] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pswebsite.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pswebsite.com"] [uri "/goggle.com"] [unique_id "aVpgmWPVmAnaICcPEvRetQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-01-04 01:05:40
(9 months ago)
2a01:4f8:191:81f3::2 - - [04/Jan/2026:01:05:25 +0000] "GET / HTTP/1.0" 403 4959 "-" "serpstatbot/2.1 ...
show more
2a01:4f8:191:81f3::2 - - [04/Jan/2026:01:05:25 +0000] "GET / HTTP/1.0" 403 4959 "-" "serpstatbot/2.1 (advanced backlink tracking bot; https://serpstatbot.com/; [email protected] )"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-19 06:06:49
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 19 01:06:42.964009 2025] [security2:error] [pid 10148:tid 10167] [client 2a01:4f8:191:81f3::2:39810] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dasperformance.com|F|2"] [data ".das performance.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dasperformance.com"] [uri "/blog/page/2/W WW.DAS performance.com"] [unique_id "aUTrckcky68o5mcxJNPzUwAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 06:46:23
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:46:16.762158 2025] [security2:error] [pid 8894:tid 8894] [client 2a01:4f8:191:81f3::2:50860] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||greenroomonline.org|F|2"] [data ".pvpnwestmont.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "greenroomonline.org"] [uri "/www.pvpnwestmont.com"] [unique_id "aSP_OBf1H9v3XHhNaB6A9gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-01 01:41:03
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 21:40:57.689164 2025] [security2:error] [pid 13334:tid 13334] [client 2a01:4f8:191:81f3::2:57176] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lionheartpublications.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lionheartpublications.com"] [uri "/[email protected] "] [unique_id "aQVlKVlG019XoAj_iPuXKwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-31 09:33:16
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 31 05:33:12.463937 2025] [security2:error] [pid 25901:tid 25901] [client 2a01:4f8:191:81f3::2:36654] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||homebuilt.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "homebuilt.org"] [uri "/directory/[email protected] "] [unique_id "aQSCWIsnSazU2xhujnl3JQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-15 19:30:52
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 15:30:46.409181 2025] [security2:error] [pid 12967:tid 12967] [client 2a01:4f8:191:81f3::2:52582] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||scoutinsignia.com|F|2"] [data ".coffeecup.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scoutinsignia.com"] [uri "/settummanque.net/www.coffeecup.com"] [unique_id "aO_2ZjzsqcW1PU6f3xqqAQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-09 01:03:30
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 21:03:25.082064 2025] [security2:error] [pid 19923:tid 19923] [client 2a01:4f8:191:81f3::2:57896] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||civilwarscout.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarscout.com"] [uri "/images/desktop.ini"] [unique_id "aOcJ3RfmWLUwG0gCxEw3mQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2025-09-25 05:52:41
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-24 08:01:03
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 04:00:55.830909 2025] [security2:error] [pid 15426:tid 15426] [client 2a01:4f8:191:81f3::2:45894] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||learnlabs.academy|F|2"] [data ".cameronsol.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "learnlabs.academy"] [uri "/www.cameronsol.com"] [unique_id "aNOlNy8-6JCpfmsm0qRZuQAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-20 14:31:59
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 10:31:54.003335 2025] [security2:error] [pid 798265:tid 798265] [client 2a01:4f8:191:81f3::2:54688] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||miranda-race-walks.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "miranda-race-walks.com"] [uri "/Pages/[email protected] "] [unique_id "aM662TmjJgMRSdDyDJXTiQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-08 23:32:01
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 19:31:55.304023 2025] [security2:error] [pid 3648521:tid 3648539] [client 2a01:4f8:191:81f3::2:33832] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.oldcarz.com|F|2"] [data ".ferrari.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.oldcarz.com"] [uri "/www.ferrari.com"] [unique_id "aL9naxY4-mBbtRDPWL8_SgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-31 13:23:22
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a01:4f8:191:81f3::2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 09:23:19.024035 2025] [security2:error] [pid 8104:tid 8104] [client 2a01:4f8:191:81f3::2:51620] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aavondalervstorage.com|F|2"] [data ".aavondalepetboarding.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aavondalervstorage.com"] [uri "/www.aavondalepetboarding.com"] [unique_id "aLRMx0quvFj9N1m3oXjc5AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
