🇺🇸
TPI-Abuse
2026-11-06 18:24:29
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:24:24.458182 2026] [security2:error] [pid 27676:tid 27676] [client 52.112.39.76:28805] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:24:24.458182 2026] [security2:error] [pid 27676:tid 27676] [client 52.112.39.76:28805] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.cmcnow.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cmcnow.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "au4bWKocXhSEwTAR-Wan6wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 06:10:57
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:10:48.768659 2026] [security2:error] [pid 23367:tid 23367] [client 52.112.39.76:4674] ModS ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:10:48.768659 2026] [security2:error] [pid 23367:tid 23367] [client 52.112.39.76:4674] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.feaverslane.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "aqjhaAdMPGqvzEJU61Nb1wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 13:50:25
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 09:50:21.638807 2026] [security2:error] [pid 12657:tid 12657] [client 52.112.39.76:10304] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 09:50:21.638807 2026] [security2:error] [pid 12657:tid 12657] [client 52.112.39.76:10304] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.cmcnow.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cmcnow.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "aqK1naGPzpZ-yxy5rHd-LQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 20:52:27
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 16:52:20.309132 2026] [security2:error] [pid 1672792:tid 1672792] [client 52.112.39.76:16386] ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 16:52:20.309132 2026] [security2:error] [pid 1672792:tid 1672792] [client 52.112.39.76:16386] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.cbcconsult.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cbcconsult.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amkWhPQq86wWi0gGCB9f_wAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-23 13:26:46
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 09:26:39.690965 2026] [security2:error] [pid 2158737:tid 2158737] [client 52.112.39.76:17408] ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 09:26:39.690965 2026] [security2:error] [pid 2158737:tid 2158737] [client 52.112.39.76:17408] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.feaverslane.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "amIWj2IwGtkX1JjIxUPInAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 01:00:13
UTC ·
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 21:00:09.701298 2026] [security2:error] [pid 11443:tid 11465] [client 52.112.39.76:51776] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 21:00:09.701298 2026] [security2:error] [pid 11443:tid 11465] [client 52.112.39.76:51776] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.sasintegrated.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.sasintegrated.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "akW4GXWsm1qi9eHAUJQcOwAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 19:45:38
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:45:33.030267 2026] [security2:error] [pid 30985:tid 30985] [client 52.112.39.76:2114] ModS ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 15:45:33.030267 2026] [security2:error] [pid 30985:tid 30985] [client 52.112.39.76:2114] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.feaverslane.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "ah3hXWjRu1fw91dlgM7N3QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-23 17:01:28
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 13:01:23.098241 2026] [security2:error] [pid 30814:tid 30814] [client 52.112.39.76:28738] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 13:01:23.098241 2026] [security2:error] [pid 30814:tid 30814] [client 52.112.39.76:28738] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.kfraser.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.kfraser.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "aepQY8BOii9GzMb_qGGergAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-17 16:56:07
UTC ·
(6 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 12:56:02.317459 2026] [security2:error] [pid 556842:tid 556842] [client 52.112.39.76:63488] M ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 17 12:56:02.317459 2026] [security2:error] [pid 556842:tid 556842] [client 52.112.39.76:63488] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.st-johns.us|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.st-johns.us"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "aeJmIv46Qq7FJAemDVmM0QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-04 07:34:12
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:34:06.362140 2026] [security2:error] [pid 3091:tid 3091] [client 52.112.39.76:39937] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 03:34:06.362140 2026] [security2:error] [pid 3091:tid 3091] [client 52.112.39.76:39937] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.feaverslane.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.feaverslane.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "adC-7tL4Y4zbKTAn1zffvgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-17 07:26:32
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 03:26:24.989478 2026] [security2:error] [pid 29571:tid 29571] [client 52.112.39.76:7233] ModS ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 03:26:24.989478 2026] [security2:error] [pid 29571:tid 29571] [client 52.112.39.76:7233] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.st-johns.us|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.st-johns.us"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "abkCIHf094_5Ox_D-mev-QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 18:17:52
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 14:17:44.450655 2026] [security2:error] [pid 32514:tid 32514] [client 52.112.39.76:16962] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 14:17:44.450655 2026] [security2:error] [pid 32514:tid 32514] [client 52.112.39.76:16962] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.cbcconsult.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cbcconsult.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "abhJSCDcJDjjD8lX1zccuQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-02 12:29:03
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 07:28:42.506439 2026] [security2:error] [pid 4890:tid 4890] [client 52.112.39.76:3075] ModSec ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 07:28:42.506439 2026] [security2:error] [pid 4890:tid 4890] [client 52.112.39.76:3075] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.kfraser.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.kfraser.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "aaWCehun3DOD8_tQb2Q-0QAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-21 01:56:40
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 20:56:35.928013 2026] [security2:error] [pid 7769:tid 7769] [client 52.112.39.76:54213] ModSe ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 20:56:35.928013 2026] [security2:error] [pid 7769:tid 7769] [client 52.112.39.76:54213] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.peaksalesnw.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.peaksalesnw.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com"] [unique_id "aZkQ03_ZR-TQA-2BFiVSIQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-02 16:24:39
UTC ·
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 11:24:34.460476 2026] [security2:error] [pid 13690:tid 13690] [client 52.112.39.76:29633] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 52.112.39.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 11:24:34.460476 2026] [security2:error] [pid 13690:tid 13690] [client 52.112.39.76:29633] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.cmcnow.com|F|2"] [data ".com#[email protected] "] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.cmcnow.com"] [uri "/autodiscover/autodiscover.json/v1.0/live.com#[email protected] "] [unique_id "aYDPws8VkzoeaWUONLr-fAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack