🇺🇸
TPI-Abuse
2025-11-12 05:06:48
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:06:39.433970 2025] [security2:error] [pid 20095:tid 20095] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 00:06:39.433970 2025] [security2:error] [pid 20095:tid 20095] [client 2a0b:f4c2:4::104:40291] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||drjasonkolber.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drjasonkolber.com"] [uri "/jasonkolber.sql"] [unique_id "aRQV3-m1rcyhFvFjp476LQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-29 07:09:02
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 03:08:55.324754 2025] [security2:error] [pid 20516:tid 20516] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 03:08:55.324754 2025] [security2:error] [pid 20516:tid 20516] [client 2a0b:f4c2:4::104:20703] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||indiahouseportland.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "indiahouseportland.com"] [uri "/backup.sql"] [unique_id "aQG9h1tDPvzYniwgnbG4WwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-27 20:36:39
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 16:36:36.082223 2025] [security2:error] [pid 32379:tid 32379] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 16:36:36.082223 2025] [security2:error] [pid 32379:tid 32379] [client 2a0b:f4c2:4::104:40317] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||marianozaro.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "marianozaro.com"] [uri "/maria.sql"] [unique_id "aP_X1HqGWw1mVvZ10UZDNwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-26 15:37:19
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 11:37:15.469246 2025] [security2:error] [pid 14828:tid 14828] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 26 11:37:15.469246 2025] [security2:error] [pid 14828:tid 14828] [client 2a0b:f4c2:4::104:48725] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.grandriverhomes.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.grandriverhomes.com"] [uri "/rhomes.sql"] [unique_id "aP5AK9a5awKEuxHy7s0ZFQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-19 13:14:52
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 09:14:45.606773 2025] [security2:error] [pid 14582:tid 14582] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 09:14:45.606773 2025] [security2:error] [pid 14582:tid 14582] [client 2a0b:f4c2:4::104:28541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wurkroom.biz"] [uri "/wp-config.php.ca"] [unique_id "aPTkRZRr0mBU9cjFrkb1awAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2025-10-18 05:17:08
UTC ·
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-10-16 03:29:32
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 23:29:25.545402 2025] [security2:error] [pid 24674:tid 24674] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 23:29:25.545402 2025] [security2:error] [pid 24674:tid 24674] [client 2a0b:f4c2:4::104:35051] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||convtek.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "convtek.com"] [uri "/convtek.sql"] [unique_id "aPBmlf0pC9utIsUsJzVz-QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-15 13:20:14
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 09:20:06.754747 2025] [security2:error] [pid 32500:tid 32527] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 15 09:20:06.754747 2025] [security2:error] [pid 32500:tid 32527] [client 2a0b:f4c2:4::104:6991] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||chelseyrae.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chelseyrae.com"] [uri "/chelseyra.sql"] [unique_id "aO-fhpM3y7pEP9T12UjCQAAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-08 18:04:22
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 14:04:15.027397 2025] [security2:error] [pid 516:tid 516] [client 2a0b:f4c2:4::104: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 14:04:15.027397 2025] [security2:error] [pid 516:tid 516] [client 2a0b:f4c2:4::104:18873] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||baliaccommodationpadangpadang.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "baliaccommodationpadangpadang.com"] [uri "/baliaccommodationp.sql"] [unique_id "aOannxHj7VarRx-gQylg-gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-08 05:51:13
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 01:51:05.405374 2025] [security2:error] [pid 29978:tid 29978] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 01:51:05.405374 2025] [security2:error] [pid 29978:tid 29978] [client 2a0b:f4c2:4::104:34223] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.alsetsystems.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.alsetsystems.com"] [uri "/alsetsyst.sql"] [unique_id "aOX7yY3_ZyLrrWDPFy3LbAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-04 13:32:12
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 09:32:05.007593 2025] [security2:error] [pid 12467:tid 12467] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 09:32:05.007593 2025] [security2:error] [pid 12467:tid 12467] [client 2a0b:f4c2:4::104:11331] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.premierveterinarysurgery.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.premierveterinarysurgery.com"] [uri "/surgery.sql"] [unique_id "aOEh1Xqn3sV7iwcOZjjNfgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-04 09:52:36
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 05:52:32.600278 2025] [security2:error] [pid 5451:tid 5451] [client 2a0b:f4c2:4::10 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 04 05:52:32.600278 2025] [security2:error] [pid 5451:tid 5451] [client 2a0b:f4c2:4::104:40217] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||newmooncafe.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newmooncafe.com"] [uri "/backups.sql"] [unique_id "aODuYNeVxnOJ0WFOssn33wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-03 21:43:57
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 17:43:52.950186 2025] [security2:error] [pid 10510:tid 10510] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 03 17:43:52.950186 2025] [security2:error] [pid 10510:tid 10510] [client 2a0b:f4c2:4::104:30379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ridgerunners.biz"] [uri "/.env.example"] [unique_id "aOBDmKN69L-L0qN9cQkHxwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
jjnxpct
2025-10-03 03:45:16
UTC ·
(1 year ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /homedesign.sql (Rule ID: 210730) - COMODO WAF: URL file extension is restricted by policy||www.koelehomedesign.nl|F|2
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 16:46:06
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 12:45:57.565512 2025] [security2:error] [pid 17067:tid 17067] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 12:45:57.565512 2025] [security2:error] [pid 17067:tid 17067] [client 2a0b:f4c2:4::104:24627] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.daos.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.daos.org"] [uri "/backup.sql"] [unique_id "aN1axc1L8eBslNInu0dd8QAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
