🇺🇸
TPI-Abuse
2026-07-13 01:35:55
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 21:35:51.794092 2026] [security2:error] [pid 25636:tid 25636] [client 89.44.228.6:59990] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sarahpeebles.net|F|2"] [data ".bandcamp.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sarahpeebles.net"] [uri "/https:/sarahpeebles.bandcamp.com"] [unique_id "alRA9-_9laO2myfsxkbWgwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-12 13:40:59
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 09:40:51.506289 2026] [security2:error] [pid 2258:tid 2258] [client 89.44.228.6:50598] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gardnercastle.com|F|2"] [data ".wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gardnercastle.com"] [uri "/https:/maxjasonpeterson.wordpress.com"] [unique_id "alOZY7Yrrn1eSzzbxxfv9QAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 15:29:05
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 11:28:58.346334 2026] [security2:error] [pid 8871:tid 8888] [client 89.44.228.6:64028] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.linfoulk.org|F|2"] [data ".composerdiversity.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.linfoulk.org"] [uri "/https:/www.composerdiversity.com"] [unique_id "alEPuvOqNr6hlOhrEH2xlgAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 19:36:07
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 15:36:01.145183 2026] [security2:error] [pid 28924:tid 28924] [client 89.44.228.6:54310] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.schonmusic.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.schonmusic.com"] [uri "/https:/schonmusic.com"] [unique_id "ak_4IU_mDbs75nKTOHXgAQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 04:45:55
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 00:45:51.238617 2026] [security2:error] [pid 21080:tid 21080] [client 89.44.228.6:58230] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.player-care.com|F|2"] [data ".player-care.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.player-care.com"] [uri "/https:/www.player-care.com"] [unique_id "ak3V_01vQhwGBa1kzxHFZwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 01:27:11
(5 days ago)
(mod_security) mod_security (id:211540) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:211540) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 21:27:08.193456 2026] [security2:error] [pid 4341:tid 4341] [client 89.44.228.6:54049] ModSecurity: Access denied with code 403 (phase 2). Match of "contains /wp-json/yoast/" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/22_SQL_SQLi.conf"] [line "17"] [id "211540"] [rev "14"] [msg "COMODO WAF: Blind SQL Injection Attack||www.al-ketab.net|F|2"] [data "Matched Data: substr found within REQUEST_URI: /alketab/include/serveralketab.html?'+window.location.search.substr(1)+'"] [severity "CRITICAL"] [tag "CWAF"] [tag "SQLi"] [hostname "www.al-ketab.net"] [uri "/alketab/include/serveralketab.html"] [unique_id "ak2nbC55fPZq5WvmzB9a5gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 09:58:48
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 05:58:39.952899 2026] [security2:error] [pid 6708:tid 6708] [client 89.44.228.6:51346] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sailyourkayak.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sailyourkayak.com"] [uri "/https:/sailyourkayak.com"] [unique_id "akzNzysohc-sZMjDdKsHiwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 02:03:06
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 22:03:01.431151 2026] [security2:error] [pid 16248:tid 16271] [client 89.44.228.6:55787] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ceol.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ceol.com"] [uri "/ceol.com"] [unique_id "akxeVUw3_AH02bXRdbmzFgAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-05-01 22:32:55
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 89.44.228.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 01 18:32:47.694621 2024] [security2:error] [pid 32217] [client 89.44.228.6:55201] [client 89.44.228.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fitflex.com|F|2"] [data ".fitflex.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fitflex.com"] [uri "/https:/www.fitflex.com"] [unique_id "ZjLDD2IQ4D8mdTzLNFfXFgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack