🇩🇪
LRob
2026-07-02 00:02:03
(1 month ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-01 15:30:23
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 11:30:17.343994 2026] [security2:error] [pid 15270:tid 15270] [client 2a03:2880:f800:c:::28744] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||opticasprisma.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "opticasprisma.com"] [uri "/opticasprisma.com"] [unique_id "akUyiR8KZ5sXgVRTfaTBkwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
canine.tools
2026-06-30 14:30:32
(1 month ago)
[fail2ban Auto Report] {"time":"2026-06-30T10:30:32.373274015-04:00","level":"INFO","source":{"funct ...
show more
[fail2ban Auto Report] {"time":"2026-06-30T10:30:32.373274015-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"priviblur.canine.tools","method":"GET","path":"/tblr/media/64/988bac0d116af831bc987518299a29b7/22b4279779a5e421-bd/s640x960/eb2e8a8041a3cbc0c35f47cc147d2ae20d746d13.pnj","user_agent":"meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)","accept_language":"","priority":"","x-forwarded-for":"2a03:2880:f800:c::","x-real-ip":"2a03:2880:f800:c::","host":"priviblur.canine.tools","check_result":{"name":"bot/fuck-facebook-meta-webindexer","rule":"DENY","weight":0}}
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-29 06:48:19
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 02:48:14.080946 2026] [security2:error] [pid 4048:tid 4048] [client 2a03:2880:f800:c:::32282] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||amazinghydraulics.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amazinghydraulics.com"] [uri "/amazinghydraulics.com"] [unique_id "akIVLswy4SOzKEL0FHmFEQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Entalpi.net
2026-06-28 04:39:10
(1 month ago)
Repeated scrapping attempts on unallowed content and/or repeated tarpit hits
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-27 23:18:40
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 19:18:34.686045 2026] [security2:error] [pid 9776:tid 9776] [client 2a03:2880:f800:c:::32596] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||earlyfordv8crrg10.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "earlyfordv8crrg10.com"] [uri "/earlyfordv8crrg10.com"] [unique_id "akBaSmcVZjeenW7B-cS3ugAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 02:29:23
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 22:29:16.735800 2026] [security2:error] [pid 26821:tid 26821] [client 2a03:2880:f800:c:::60056] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||raynernet.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "raynernet.com"] [uri "/raynernet.com"] [unique_id "aj81fAxaQAvkAUoFjZWFBQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
gui-ying233
2026-06-27 00:23:11
(1 month ago)
meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
gui-ying233
2026-06-26 00:06:42
(1 month ago)
meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-24 22:19:21
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:19:15.018784 2026] [security2:error] [pid 24147:tid 24147] [client 2a03:2880:f800:c:::45726] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mariarozella.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mariarozella.com"] [uri "/mariarozella.com"] [unique_id "ajxX43qJ1OhbvJ99p9zSZAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 00:35:34
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 20:35:30.967544 2026] [security2:error] [pid 29248:tid 29248] [client 2a03:2880:f800:c:::37554] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||napaautopartskeokuk.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "napaautopartskeokuk.com"] [uri "/napaautopartskeokuk.com"] [unique_id "ajsmUt1j1KCgqi1_gnL8UAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 04:15:40
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 00:15:36.680622 2026] [security2:error] [pid 31762:tid 31762] [client 2a03:2880:f800:c:::53010] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||naturessecretresort.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "naturessecretresort.com"] [uri "/naturessecretresort.com"] [unique_id "ajoIaNX3-grx4QEf39JJmwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
gui-ying233
2026-06-15 00:04:08
(2 months ago)
meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
gui-ying233
2026-06-13 00:19:58
(2 months ago)
meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-12 22:23:32
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f800:c:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 18:23:25.092593 2026] [security2:error] [pid 14529:tid 14529] [client 2a03:2880:f800:c:::47884] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||phtaudio.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phtaudio.com"] [uri "/phtaudio.com"] [unique_id "aiyG3Xk3JWb_-uwCEz09SgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack