🇺🇸
TPI-Abuse
2026-04-18 20:56:00
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 16:55:52.428992 2026] [security2:error] [pid 3438477:tid 3438554] [client 45.154.138.90:28423] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||iamfluff.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iamfluff.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePv2JyTwVM_m8PMm-HFsAAAAsQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 20:38:49
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 16:38:42.169111 2026] [security2:error] [pid 1352635:tid 1352635] [client 45.154.138.90:20513] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alexthepunk.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alexthepunk.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePr0rNmD58gS2xxk5h05QAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 20:16:21
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 16:16:17.317227 2026] [security2:error] [pid 1270033:tid 1270033] [client 45.154.138.90:59585] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ubuciko.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ubuciko.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePmkRidO9MD7jweBiIsnAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 19:23:11
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 15:23:04.762163 2026] [security2:error] [pid 720648:tid 720648] [client 45.154.138.90:30971] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tekbit.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tekbit.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePaGCsjr9AUdtHcFn6QdwAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 18:49:01
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 14:48:56.109484 2026] [security2:error] [pid 2050090:tid 2050090] [client 45.154.138.90:44105] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||heavenonearthonline.net|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "heavenonearthonline.net"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePSGGZ2I2jt49VG53vmQQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 18:33:25
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 14:33:21.404677 2026] [security2:error] [pid 1374811:tid 1374811] [client 45.154.138.90:24461] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grollman.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grollman.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePOcT-d3B27r3edsQ55ZAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 18:12:27
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 14:12:20.895435 2026] [security2:error] [pid 3142669:tid 3142669] [client 45.154.138.90:48987] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nesetsv.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nesetsv.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePJhF6lnjfOvexocdVlSwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 17:33:45
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 13:33:39.060855 2026] [security2:error] [pid 809420:tid 809420] [client 45.154.138.90:56031] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.waterjetsolutions.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.waterjetsolutions.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aePAc5P8rDXkpVUFaJddbgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 17:10:55
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 13:10:50.532065 2026] [security2:error] [pid 2198171:tid 2198171] [client 45.154.138.90:63999] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||buffalogunsaz.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "buffalogunsaz.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeO7GlysAcYmU4Est4hbIwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 16:41:35
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 12:41:31.996473 2026] [security2:error] [pid 1844724:tid 1844724] [client 45.154.138.90:37627] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||smartstylehair.com|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "smartstylehair.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeO0OwVFbagSFhHZJI2TKgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-04-18 13:15:00
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-04-18 12:10:50
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.154.138.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 18 08:10:46.871098 2026] [security2:error] [pid 2015106:tid 2015106] [client 45.154.138.90:30587] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||advantagept.org|F|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "advantagept.org"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "aeN0xuPY5yDzH6ZHgC2CjgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇭
thaizone.com
2026-03-18 03:47:40
(2 months ago)
Brute-forcing login against websites (D1-1) #1
Web App Attack
Hacking
🇬🇧
consul.to
2026-03-16 06:39:00
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-03-16 04:53:55
(2 months ago)
Multiple WAF Violations
Web App Attack