🇺🇸
TPI-Abuse
2026-06-28 21:31:22
(29 minutes ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 17:31:17.828160 2026] [security2:error] [pid 7932:tid 7932] [client 60.27.226.205:53774] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||rosawallas.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "rosawallas.com"] [uri "/"] [unique_id "akGSpYuBxXocaQkLD22gTgAAAAE"], referer: http://rosawallas.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 01:29:39
(20 hours ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 21:29:31.284633 2026] [security2:error] [pid 30246:tid 30246] [client 60.27.226.205:55156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.bigholegolf.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.bigholegolf.com"] [uri "/"] [unique_id "akB4-0cvPvNX-PYJ24caiwAAAAQ"], referer: https://www.bigholegolf.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 00:14:35
(21 hours ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 20:14:28.717874 2026] [security2:error] [pid 25662:tid 25662] [client 60.27.226.205:53282] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||brucerohrphotography.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "brucerohrphotography.com"] [uri "/"] [unique_id "akBnZKyB7Mwvh3QUROwPRwAAABE"], referer: http://brucerohrphotography.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 20:18:09
(1 day ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 16:18:03.376438 2026] [security2:error] [pid 23082:tid 23082] [client 60.27.226.205:53674] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||indyham.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "indyham.com"] [uri "/"] [unique_id "akAv-0DXyEcnxbtCxNWhDgAAABQ"], referer: http://indyham.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 20:43:28
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 16:43:24.388239 2026] [security2:error] [pid 12379:tid 12379] [client 60.27.226.205:53983] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.unified-dispatch.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.unified-dispatch.com"] [uri "/"] [unique_id "aj7kbFEoCtqKw-_uxlrmHAAAAAQ"], referer: https://www.unified-dispatch.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 23:22:39
(2 days ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:22:36.960957 2026] [security2:error] [pid 26989:tid 27011] [client 60.27.226.205:53559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.power51.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.power51.com"] [uri "/"] [unique_id "aj24PGeSjlMtciumpAE3VAAAAA0"], referer: https://www.power51.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 19:30:58
(4 days ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 15:30:52.758958 2026] [security2:error] [pid 12549:tid 12549] [client 60.27.226.205:54404] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||kadimasecurity.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kadimasecurity.com"] [uri "/"] [unique_id "ajwwbPekHyUj1wlAlSb5AQAAAAk"], referer: http://kadimasecurity.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 00:42:11
(4 days ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 20:42:06.426120 2026] [security2:error] [pid 17494:tid 17494] [client 60.27.226.205:54550] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.toody.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.toody.com"] [uri "/"] [unique_id "ajsn3hhePwn9czChArRvkAAAAAY"], referer: http://www.toody.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 22:43:04
(5 days ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 18:42:56.197138 2026] [security2:error] [pid 30380:tid 30380] [client 60.27.226.205:54643] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.doctorc.net|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.doctorc.net"] [uri "/"] [unique_id "ajm6cEBHZIkmHDTeWmjo7wAAAAE"], referer: http://www.doctorc.net/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 18:59:46
(6 days ago)
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs ...
show more
(mod_security) mod_security (id:210831) triggered by 60.27.226.205 (no-data): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 14:59:40.760081 2026] [security2:error] [pid 6933:tid 6933] [client 60.27.226.205:53568] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||naplesdogcenter.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "naplesdogcenter.com"] [uri "/"] [unique_id "ajmGHJbfWVwsT2p2hQ_ZKQAAACE"], referer: http://naplesdogcenter.com/
show less
Brute-Force
Bad Web Bot
Web App Attack