🇺🇸
TPI-Abuse
2026-03-22 18:13:08
UTC ·
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 14:13:02.661625 2026] [security2:error] [pid 1963 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 14:13:02.661625 2026] [security2:error] [pid 19638:tid 19638] [client 2a03:e600:100::7:53024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rebelhollowfarm.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rebelhollowfarm.com"] [uri "/arm_com.sql"] [unique_id "acAxLoqvRwzG_bdJ0mjGMAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 12:07:19
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 08:07:09.885838 2026] [security2:error] [pid 2891 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 08:07:09.885838 2026] [security2:error] [pid 28916:tid 28916] [client 2a03:e600:100::7:60898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.africanwisdominimageandproverb.com"] [uri "/.git/config"] [unique_id "ab6J7TcqM6RBh0Lihp-67AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-03-14 12:23:00
UTC ·
(7 months ago)
IPBlock protected site ID [3717-sec].
Robotic site crawling, undeclared spider
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-10 04:52:30
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 00:52:23.619367 2026] [security2:error] [pid 1666 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 10 00:52:23.619367 2026] [security2:error] [pid 16662:tid 16662] [client 2a03:e600:100::7:43078] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lkabookkeeping.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lkabookkeeping.com"] [uri "/ing_wp1.sql"] [unique_id "aa-jh6j5FmlHKZKF9hUX_wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-09 04:14:00
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 00:13:56.690071 2026] [security2:error] [pid 2808 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 09 00:13:56.690071 2026] [security2:error] [pid 28084:tid 28084] [client 2a03:e600:100::7:33792] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||geckoturner.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "geckoturner.com"] [uri "/oturner_db.sql"] [unique_id "aa5JBIMLXVNe3jvFZlE7qgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-03 19:07:31
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 14:07:26.045741 2026] [security2:error] [pid 7009 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 14:07:26.045741 2026] [security2:error] [pid 7009:tid 7009] [client 2a03:e600:100::7:59366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sekelconsulting.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sekelconsulting.com"] [uri "/ekelconsulting_prod.sql"] [unique_id "aacxbhNfxmtMWTxl1M6bwwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-27 11:58:39
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 06:58:32.053241 2026] [security2:error] [pid 3201 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 06:58:32.053241 2026] [security2:error] [pid 32018:tid 32018] [client 2a03:e600:100::7:33784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.sabras.com"] [uri "/.git/config"] [unique_id "aaGG6Lu4ZGKwRa7n90wh-gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 02:56:28
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 21:56:21.659289 2026] [security2:error] [pid 3055 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 21:56:21.659289 2026] [security2:error] [pid 30552:tid 30552] [client 2a03:e600:100::7:46478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.plava.org"] [uri "/.git/config"] [unique_id "aZ0TVTgPAu_izVy-bVRdzwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-23 19:07:56
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 14:07:48.263042 2026] [security2:error] [pid 3240 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 14:07:48.263042 2026] [security2:error] [pid 32400:tid 32400] [client 2a03:e600:100::7:49032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.edemahy.com"] [uri "/.git/config"] [unique_id "aZylhA9uvx77OBMrpj0O-QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 16:30:52
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 11:30:47.533231 2026] [security2:error] [pid 2563 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 11:30:47.533231 2026] [security2:error] [pid 25636:tid 25659] [client 2a03:e600:100::7:38554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.bullfrogspond.com"] [uri "/.git/config"] [unique_id "aZsvNzxra7lq5b4LafU_8QAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 13:51:28
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 08:51:21.448623 2026] [security2:error] [pid 1049 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 08:51:21.448623 2026] [security2:error] [pid 1049:tid 1049] [client 2a03:e600:100::7:48514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.glassicannex.org"] [uri "/.git/config"] [unique_id "aZsJ2RV3vm07DBXAc3RShAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 16:06:09
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 11:06:00.054690 2026] [security2:error] [pid 1998 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 11:06:00.054690 2026] [security2:error] [pid 19982:tid 19982] [client 2a03:e600:100::7:38570] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||orcastrong.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "orcastrong.com"] [uri "/weekly.sql"] [unique_id "aZc06HDBoHZCYQbt36qiKwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-16 08:54:38
UTC ·
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 03:54:23.352631 2026] [security2:error] [pid 1485 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 03:54:23.352631 2026] [security2:error] [pid 14858:tid 14858] [client 2a03:e600:100::7:42152] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||timetemple.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "timetemple.org"] [uri "/temple_com.sql"] [unique_id "aZLbP9vhbiEFrEsxt5YCOwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2026-02-15 18:40:00
UTC ·
(8 months ago)
IPBlock protected site ID [3717-sec].
Robotic site crawling, undeclared spider
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-07 10:08:30
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 05:08:26.105597 2026] [security2:error] [pid 1923 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a03:e600:100::7 (tor-exit-anonymizer-v6.appliedprivacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 05:08:26.105597 2026] [security2:error] [pid 1923002:tid 1923002] [client 2a03:e600:100::7:45394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.armadillosigns.com"] [uri "/.git/config"] [unique_id "aYcPGg4bnkHyKRfT0gC3bQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack