🇺🇸
TPI-Abuse
2026-10-02 09:33:04
(7 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 05:32:59.395020 2026] [security2:error] [pid 26810:tid 26810] [client 2a02:2479:e0:eb00::1:55136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.indoorsfinishing.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.indoorsfinishing.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar96S26OINA6M0rLPOV7fAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 08:21:46
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:21:37.480189 2026] [security2:error] [pid 16133:tid 16133] [client 2a02:2479:e0:eb00::1:62127] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.churchtop.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.churchtop.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar9pkej6iAlClVGTRfa-VAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 07:44:35
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:44:28.999073 2026] [security2:error] [pid 30810:tid 30810] [client 2a02:2479:e0:eb00::1:59513] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.roselockecasting.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.roselockecasting.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar9g3Cf2KmLK3a-lmfXH0AAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 04:53:05
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:53:01.885501 2026] [security2:error] [pid 2079:tid 2079] [client 2a02:2479:e0:eb00::1:64698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.pakistanvision.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.pakistanvision.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar84rRMQEs_LbAdLSt1dFAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 04:29:28
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:29:22.951636 2026] [security2:error] [pid 11660:tid 11660] [client 2a02:2479:e0:eb00::1:55760] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.weismanovens.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.weismanovens.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar8zIhejREMcXT_5e1yJjQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 04:10:59
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:10:55.859628 2026] [security2:error] [pid 7221:tid 7221] [client 2a02:2479:e0:eb00::1:56481] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.trinitydent.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.trinitydent.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar8uzx5YL2oLNo9lDrrAUQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 02:27:23
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 22:27:16.508007 2026] [security2:error] [pid 10672:tid 10672] [client 2a02:2479:e0:eb00::1:52317] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.admcolumbus.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.admcolumbus.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar8WhF-GIBaMX8BdZIyE2wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 00:11:47
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 20:11:40.611487 2026] [security2:error] [pid 16502:tid 16502] [client 2a02:2479:e0:eb00::1:51710] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.madbanana.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.madbanana.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar72vCat0po7aR4t4fr_XQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 20:17:05
(21 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 16:17:01.310609 2026] [security2:error] [pid 24576:tid 24576] [client 2a02:2479:e0:eb00::1:61310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.southfloridachoppers.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.southfloridachoppers.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar6_vdf-UHzQhTiYM5AFSwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 19:06:15
(22 hours ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 15:06:11.219147 2026] [security2:error] [pid 13831:tid 13831] [client 2a02:2479:e0:eb00::1:61251] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.gonzalez.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.gonzalez.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar6vI7TuRhhXA7GL5oHR-AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 16:26:01
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:25:55.689982 2026] [security2:error] [pid 10378:tid 10378] [client 2a02:2479:e0:eb00::1:52689] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.mitchellart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.mitchellart.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar6Jk6pSnYfdNqOwDbQucQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 16:10:28
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:10:24.720000 2026] [security2:error] [pid 6796:tid 6796] [client 2a02:2479:e0:eb00::1:64284] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.form-a-tool.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.form-a-tool.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar6F8BWbE3Ms6WlpRBMk5wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 15:52:33
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:52:30.641815 2026] [security2:error] [pid 27998:tid 27998] [client 2a02:2479:e0:eb00::1:53235] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.morninginc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.morninginc.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar6Bvu76GG5q8xuWgeIWlgAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 15:19:27
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:19:19.212814 2026] [security2:error] [pid 26852:tid 26930] [client 2a02:2479:e0:eb00::1:64335] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.tierrasolymar.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.tierrasolymar.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "ar559y-TyOmxq0EgfGtOmwAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 03:51:08
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a02:2479:e0:eb00::1 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:51:01.774994 2026] [security2:error] [pid 3699:tid 3699] [client 2a02:2479:e0:eb00::1:58083] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.thresholddigital.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.thresholddigital.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aryHJY-KTOOTWZe28y0dgwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
