🇺🇸
TPI-Abuse
2026-06-27 16:34:14
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 12:34:08.603305 2026] [security2:error] [pid 4068:tid 4068] [client 31.76.76.199:15207] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||aivosminerals.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "aivosminerals.com"] [uri "/license.txt"] [unique_id "aj_7gGSgwj_D3MA_ZO9TDQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Kreapptivo
2026-06-27 15:59:38
(1 day ago)
[27/Jun/2026:17:59:35 +0200] Web-Request: "GET /license.txt", User-Agent: "Mozilla/5.0 (Windows NT 5 ...
show more
[27/Jun/2026:17:59:35 +0200] Web-Request: "GET /license.txt", User-Agent: "Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0 Paros/3.2.13"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 15:04:36
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 11:04:32.140582 2026] [security2:error] [pid 7318:tid 7318] [client 31.76.76.199:58569] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||airedaleflyer.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "airedaleflyer.com"] [uri "/license.txt"] [unique_id "aj_mgBfoBvzEuB2JRlzAqQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 13:49:59
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 09:49:54.765684 2026] [security2:error] [pid 573:tid 573] [client 31.76.76.199:65518] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||aim-controls.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "aim-controls.com"] [uri "/license.txt"] [unique_id "aj_VAiwhHT8hgXcbkh6OqgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-27 12:42:46
(1 day ago)
[SatJun2714:42:40.7224592026][security2:error][pid3997162:tid3997425][client31.76.76.199:0]ModSecuri ...
show more
[SatJun2714:42:40.7224592026][security2:error][pid3997162:tid3997425][client31.76.76.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:n\(\?:-stealth\|sauditor\|e\(\?:ssus\|etwork-services-auditor\)\|ikto\|map\)\|b\(\?:lack\?widow\|rutus\|ilbo\)\|web\(\?:inspec\|roo\)t\|p\(\?:mafind\|aros\|avuk\)\|cgichk\|jaascois\|\\\\\\\\.nasl\|metis\|w\(\?:ebtrendssecurityanalyzer\|hcc\|3af\\\\\\\\.sourceforge\\\\\\\\.net\)\|\\\\\\\\bzmeu\\\\\\\\b\|springenwerk\|...\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"184\"][id\"330034\"][rev\"14\"][msg\"Atomicorp.comWAFRules:UnauthorizedVulnerabilityScannerdetected\"][data\"paros\"][severity\"CRITICAL\"][hostname\"aid-consultancy.com\"][uri\"/license.txt\"][unique_id\"aj_FQOD8zCZUoVrYUrBQvgAAAJY\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 10:11:15
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:11:08.990576 2026] [security2:error] [pid 20212:tid 20212] [client 31.76.76.199:16230] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||agrizel.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "agrizel.com"] [uri "/license.txt"] [unique_id "aj-hvJVwaN-HWZMx4_eG3QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 09:23:28
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 05:23:21.449471 2026] [security2:error] [pid 25671:tid 25671] [client 31.76.76.199:29458] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||agirlwithaguitar.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "agirlwithaguitar.com"] [uri "/license.txt"] [unique_id "aj-WiQpz1r9Htp4oCGI7ugAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 08:10:33
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 04:10:27.607290 2026] [security2:error] [pid 30985:tid 30985] [client 31.76.76.199:57581] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||agchurchkuwait.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "agchurchkuwait.com"] [uri "/license.txt"] [unique_id "aj-FczHzdB7stNW0dgQnDwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 07:14:12
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:14:08.005554 2026] [security2:error] [pid 21281:tid 21281] [client 31.76.76.199:22148] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||africanwisdominimageandproverb.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "africanwisdominimageandproverb.com"] [uri "/license.txt"] [unique_id "aj94QMh04qYcaOYdV32q3wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 06:43:17
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 02:43:10.936622 2026] [security2:error] [pid 10512:tid 10512] [client 31.76.76.199:56779] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||affordablehomegoods.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "affordablehomegoods.com"] [uri "/license.txt"] [unique_id "aj9w_q9cG9Esg67T7vAFjAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 06:21:56
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 02:21:49.717593 2026] [security2:error] [pid 3165:tid 3165] [client 31.76.76.199:63322] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||afdfurniture.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "afdfurniture.com"] [uri "/license.txt"] [unique_id "aj9r_TzOOKiVKZmKUYz8EwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 05:34:39
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 01:34:31.401491 2026] [security2:error] [pid 22723:tid 22723] [client 31.76.76.199:31715] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||aemcmullin.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "aemcmullin.com"] [uri "/license.txt"] [unique_id "aj9g5xJzbYbYhM2HdX-odwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 04:31:34
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 00:31:26.948627 2026] [security2:error] [pid 14859:tid 14859] [client 31.76.76.199:15110] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||advancedmachininginc.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "advancedmachininginc.com"] [uri "/license.txt"] [unique_id "aj9SHsUnO7SdciRRvGUulwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 04:14:09
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 00:14:02.438150 2026] [security2:error] [pid 32093:tid 32095] [client 31.76.76.199:30640] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||adultbaja.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "adultbaja.com"] [uri "/license.txt"] [unique_id "aj9OCiT3IVr7KP9Oz2T6dQAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 03:56:40
(1 day ago)
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210801) triggered by 31.76.76.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 23:56:36.383644 2026] [security2:error] [pid 7255:tid 7255] [client 31.76.76.199:42357] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "paros" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||adrienberthaud.com|F|2"] [data "mozilla/5.0 (windows nt 5.1; rv:22.0) gecko/20100101 firefox/22.0 paros/3.2.13"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "adrienberthaud.com"] [uri "/license.txt"] [unique_id "aj9J9NUzfP1SKTfaZsPb4wAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack