🇺🇸
TPI-Abuse
2026-03-03 02:20:03
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 21:19:55.221655 2026] [security2:error] [pid 21441:tid 21441] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 21:19:55.221655 2026] [security2:error] [pid 21441:tid 21441] [client 2a03:2880:f806:1b:::56802] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||mitchellamazing.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mitchellamazing.com"] [uri "/mitchellamazing.com"] [unique_id "aaZFSxJ981CM2UbGKr889gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 16:35:36
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 11:35:32.932711 2026] [security2:error] [pid 12362:tid 12362] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 11:35:32.932711 2026] [security2:error] [pid 12362:tid 12362] [client 2a03:2880:f806:1b:::43124] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mariarozella.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mariarozella.com"] [uri "/mariarozella.com"] [unique_id "aZswVAFcUfIS4tSco3SdjgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 19:07:03
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 14:06:55.168251 2026] [security2:error] [pid 1924:tid 1924] [client 2a03:2880:f8 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 14:06:55.168251 2026] [security2:error] [pid 1924:tid 1924] [client 2a03:2880:f806:1b:::55346] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||pascalroy.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pascalroy.com"] [uri "/pascalroy.com"] [unique_id "aZdfT7wlWV3-OhA4NkEyqQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 16:18:54
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 11:18:49.335341 2026] [security2:error] [pid 29111:tid 29111] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 11:18:49.335341 2026] [security2:error] [pid 29111:tid 29111] [client 2a03:2880:f806:1b:::55342] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||book-arts.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "book-arts.com"] [uri "/book-arts.com"] [unique_id "aZXmaT5ZL3zcaNVp9CmYUgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-12 02:38:03
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:37:56.573736 2026] [security2:error] [pid 20382:tid 20382] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 21:37:56.573736 2026] [security2:error] [pid 20382:tid 20382] [client 2a03:2880:f806:1b:::55404] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.alafiariverrendezvous.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.alafiariverrendezvous.org"] [uri "/2020-alafia-registration/[email protected] "] [unique_id "aY09BL1odq01TETGIHEVAQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-07 03:14:16
(8 months ago)
(mod_security) mod_security (id:225080) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 22:14:12.847856 2026] [security2:error] [pid 27842:tid 27842] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:225080) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 06 22:14:12.847856 2026] [security2:error] [pid 27842:tid 27842] [client 2a03:2880:f806:1b:::46330] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)||arsenalfordemocracy.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arsenalfordemocracy.com"] [uri "/wp-includes/js/tinymce/utils/"] [unique_id "aYauBMyLANfc3ItlSZkfRgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-06 00:55:52
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 19:55:48.255466 2026] [security2:error] [pid 7402:tid 7402] [client 2a03:2880:f8 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 19:55:48.255466 2026] [security2:error] [pid 7402:tid 7402] [client 2a03:2880:f806:1b:::59006] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.baliaccommodationpadangpadang.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.baliaccommodationpadangpadang.com"] [uri "/portfolio/location/[email protected] "] [unique_id "aYU8FIUQF388cJlFRsS6_QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-23 01:11:36
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 20:11:23.981643 2026] [security2:error] [pid 10504:tid 10504] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 20:11:23.981643 2026] [security2:error] [pid 10504:tid 10504] [client 2a03:2880:f806:1b:::51088] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||3-6trucking.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3-6trucking.com"] [uri "/3-6trucking.com"] [unique_id "aXLKu7fIZFiTMK7PjHJ_fgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-18 19:03:15
(9 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 14:03:08.874089 2026] [security2:error] [pid 16293:tid 16293] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 18 14:03:08.874089 2026] [security2:error] [pid 16293:tid 16293] [client 2a03:2880:f806:1b:::40928] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/324735"] [unique_id "aW0ubIzwAYophFkhHx4UPQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-14 07:09:44
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 02:09:41.083010 2026] [security2:error] [pid 5727:tid 5727] [client 2a03:2880:f8 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 02:09:41.083010 2026] [security2:error] [pid 5727:tid 5727] [client 2a03:2880:f806:1b:::42402] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thebeesgold.com|F|2"] [data ".bat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thebeesgold.com"] [uri "/_adam/modules/ztxt2php.BAT"] [unique_id "aWdBNfacy8oaGnF-I1WcdgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-01-09 09:56:31
(9 months ago)
ave-88 : Bloc AI bots=>/sitemap-index.xml(meta-external)
Hacking
🇩🇪
Didier Lagaert
2026-01-09 09:51:09
(9 months ago)
lie-88 : Bloc AI bots=>/sitemap_index.xml(meta-external)
Hacking
🇩🇪
conseilgouz
2026-01-09 09:41:16
(9 months ago)
ece-88 : Bloc AI bots=>/SiteMap.aspx(meta-external)
Hacking
🇺🇸
TPI-Abuse
2026-01-08 23:42:29
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 18:42:25.022294 2026] [security2:error] [pid 21155:tid 21155] [client 2a03:2880: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 08 18:42:25.022294 2026] [security2:error] [pid 21155:tid 21155] [client 2a03:2880:f806:1b:::51276] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||naturessecretresort.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "naturessecretresort.com"] [uri "/naturessecretresort.com"] [unique_id "aWBA4fcxiNUitzYtcQUCygAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-31 21:42:21
(10 months ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 16:42:15.436004 2025] [security2:error] [pid 6892:tid 6892] [client 2a03:2880:f8 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:1b:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 31 16:42:15.436004 2025] [security2:error] [pid 6892:tid 6892] [client 2a03:2880:f806:1b:::34844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.texascottagebakers.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.texascottagebakers.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aVWYt5f6JHwPGvU5wVh47AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
