🇺🇸
TPI-Abuse
2026-10-18 05:47:15
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:47:10.332033 2026] [security2:error] [pid 26127:tid 26127] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:13328] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.fulltime-life.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.fulltime-life.com"] [uri "/config.php.bak"] [unique_id "atRdXnCPQ501c5zHzdZG8gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 05:11:56
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 01:11:50.655506 2026] [security2:error] [pid 22832:tid 22838] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:13373] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||beelineproductions.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "beelineproductions.com"] [uri "/admin/config.php.bak"] [unique_id "atRVFrUZkbvnX-NM3QO80wAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 04:13:06
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:12:57.846180 2026] [security2:error] [pid 28262:tid 28262] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:12818] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||monkeyonabike.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "monkeyonabike.com"] [uri "/config.php.bak"] [unique_id "atRHSfs8tbGS9lrm-yA5dwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 03:47:08
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:46:59.421603 2026] [security2:error] [pid 1131:tid 1144] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:13746] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||internationalattorney.biz|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "internationalattorney.biz"] [uri "/database.sql"] [unique_id "atRBM_s7do5vqUPHIj-aowAAAUc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-18 02:59:51
(1 day ago)
[SunOct1804:59:43.9676452026][security2:error][pid3383676:tid3383787][client2400:cb00:1031:1000:2cb8 ...
show more
[SunOct1804:59:43.9676452026][security2:error][pid3383676:tid3383787][client2400:cb00:1031:1000:2cb8:a2e:97b4:da50:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"furgonianoleggio.ch\"][uri\"/rezerv.sql\"][unique_id\"atQ2H7HoVBZo14rnaXgpYAAAANY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 02:44:37
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:44:28.625399 2026] [security2:error] [pid 10827:tid 10827] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:11557] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||kajota.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kajota.com"] [uri "/rezerv.sql"] [unique_id "atQyjOZDwuVTgQJFjVFIRAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 22:56:26
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 18:56:20.185401 2026] [security2:error] [pid 15562:tid 15562] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:10753] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mintgames.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mintgames.com"] [uri "/rezerv.sql"] [unique_id "atP9FFPh_5cYCsc3yMaO7gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 08:30:24
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 04:30:17.080733 2026] [security2:error] [pid 903:tid 903] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:10202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertlundquist.com"] [uri "/.git/config"] [unique_id "arzIma4sPPJwRbTEJmEn_QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 05:11:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 01:11:11.003830 2026] [security2:error] [pid 5537:tid 5537] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:14109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ultratecnologiamx.activethinkers.net"] [uri "/.git/config"] [unique_id "aoU67r9WDr2ygJruAhZXigAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 03:37:43
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:37:37.431623 2026] [security2:error] [pid 1846:tid 1846] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:10573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.kripner.net"] [uri "/.git/HEAD"] [unique_id "aoUlASP1k-9tTC8ZzOH2TAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-19 03:19:03
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:18:58.201966 2026] [security2:error] [pid 13156:tid 13156] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:9256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kircali.net"] [uri "/.git/HEAD"] [unique_id "aoUgouozSw5O-5o8dCN1wwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 16:13:58
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 12:13:51.897090 2026] [security2:error] [pid 15547:tid 15547] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:12181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.method1.net"] [uri "/.git/config"] [unique_id "aoMzP__Z2T40g2_VyGBatgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 08:51:31
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:51:24.698139 2026] [security2:error] [pid 3168:tid 3168] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:13987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.riccibuilders.net"] [uri "/.git/HEAD"] [unique_id "aoLLjBFyNLfrXYx_tEl0twAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 04:48:42
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 00:48:38.307773 2026] [security2:error] [pid 7795:tid 7795] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:11846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isaiah.byles.net"] [uri "/.git/HEAD"] [unique_id "aoKSpiT04dOvk921EaKBgQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 03:07:28
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1031:1000:2cb8:a2e:97b4:da50 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 23:07:15.218697 2026] [security2:error] [pid 22136:tid 22136] [client 2400:cb00:1031:1000:2cb8:a2e:97b4:da50:11581] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.schmitzcomm.net"] [uri "/.git/config"] [unique_id "aoJ64_XTUphYZxv41PgnaQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
