🇺🇸
TPI-Abuse
2026-04-20 18:46:45
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 14:46:37.992280 2026] [security2:error] [pid 3954584:tid 3954584] [client 2a03:2880:f806:22:::39818] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||natchezbicycle.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "natchezbicycle.com"] [uri "/natchezbicycle.com"] [unique_id "aeZ0jaoGIbgnMKmLAw0FtwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-20 10:13:51
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 06:13:47.595017 2026] [security2:error] [pid 705741:tid 705741] [client 2a03:2880:f806:22:::35394] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||phtaudio.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phtaudio.com"] [uri "/phtaudio.com"] [unique_id "aeX8W-CQtbuBJzRi_UJgjAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-20 05:28:22
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 20 01:28:17.775125 2026] [security2:error] [pid 3991460:tid 3991460] [client 2a03:2880:f806:22:::34948] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lumentravel.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lumentravel.com"] [uri "/lumentravel.com"] [unique_id "aeW5cYRVfgg04jA8MoeB8wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-19 08:51:09
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 04:51:05.512442 2026] [security2:error] [pid 1564686:tid 1564686] [client 2a03:2880:f806:22:::37622] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cpking.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cpking.com"] [uri "/cpking.com"] [unique_id "aeSXeXhdHHSwp21Jf-KAoAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
london2038.com
2026-04-17 18:31:38
(5 months ago)
Too many failed requests
2a03:2880:f806:22:: - - [17/Apr/2026:16:22:00 +0200] "GET /User:MiguelG5611 ...
show more
Too many failed requests
2a03:2880:f806:22:: - - [17/Apr/2026:16:22:00 +0200] "GET /User:MiguelG5611603 HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - - [17/Apr/2026:16:28:05 +0200] "GET /User:CliftonMcPeak HTTP/2.0" 404 10174 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - - [17/Apr/2026:16:30:42 +0200] "GET /User:CliffordBagot8 HTTP/2.0" 404 10192 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - - [17/Apr/2026:17:44:23 +0200] "GET /User:CandelariaP04 HTTP/2.0" 404 10174 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - - [17/Apr/2026:19:36:03 +0200] "GET /User:BrookMorford HTTP/2.0" 404 10156 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - -
...
show less
Web Spam
Bad Web Bot
🇺🇸
gui-ying233
2026-04-14 00:07:55
(5 months ago)
meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-13 18:27:26
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 14:27:17.501243 2026] [security2:error] [pid 2368866:tid 2368866] [client 2a03:2880:f806:22:::63939] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||baselinesc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "baselinesc.com"] [uri "/baselinesc.com"] [unique_id "ad01hWnZng4tEuxT2IqsAAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 06:35:04
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:22:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 02:34:59.473288 2026] [security2:error] [pid 1228234:tid 1228234] [client 2a03:2880:f806:22:::55537] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bjfrancislaw.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bjfrancislaw.com"] [uri "/bjfrancislaw.com"] [unique_id "adyOkwe1Wc5evSsOOFRNIgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
gui-ying233
2026-04-13 00:05:19
(5 months ago)
meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
gui-ying233
2026-04-11 00:24:22
(5 months ago)
meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
🇺🇸
myagent.site
2026-04-10 12:11:02
(5 months ago)
Blocking for trying to access an exploit file: /SiteMap.aspx
Hacking
🇺🇸
gui-ying233
2026-04-10 00:22:22
(5 months ago)
meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
2026-04-09 10:46:58
(5 months ago)
(metabot_custom) Bloqueo de Meta Bot por exceso de hits (match: meta-externalagent/1.1 (+https://dev ...
show more
(metabot_custom) Bloqueo de Meta Bot por exceso de hits (match: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)) 2a03:2880:f806:22:: (US/United States/-)
show less
Hacking
🇩🇪
london2038.com
2026-04-09 04:40:54
(5 months ago)
Too many failed requests
2a03:2880:f806:22:: - - [09/Apr/2026:04:06:21 +0200] "GET /index.php?title= ...
show more
Too many failed requests
2a03:2880:f806:22:: - - [09/Apr/2026:04:06:21 +0200] "GET /index.php?title=Special:WhatLinksHere/Template:Hellgate_quest_block&limit=100&from=260&back=159&hideredirs=1&hidelinks=1&hidetrans=1 HTTP/2.0" 404 12885 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - - [09/Apr/2026:04:23:33 +0200] "GET /index.php?title=Special:WhatLinksHere/Blackfriar%27s&hidetrans=1&hidelinks=1 HTTP/2.0" 404 11970 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - - [09/Apr/2026:04:53:13 +0200] "GET /index.php?title=Special:WhatLinksHere/The_Hag&limit=20&hidetrans=1&hidelinks=1 HTTP/2.0" 404 11883 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:22:: - - [09/Apr/2026:05:11:40 +0200] "GET /index.php?title=Special:WhatLinksHere/Template:ItemLineCss&from=505&back=505&hideredirs=1&hidelinks=1&hidetrans=1 HTTP/2.0
...
show less
Web Spam
Bad Web Bot
🇺🇸
gui-ying233
2026-04-09 00:19:41
(5 months ago)
meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
Bad Web Bot
