🇺🇸
TPI-Abuse
2025-04-08 02:14:31
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 22:14:23.276211 2025] [security2:error] [pid 586903:tid 586903] [client 2a0b:f4c2:4 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 22:14:23.276211 2025] [security2:error] [pid 586903:tid 586903] [client 2a0b:f4c2:4::104:6333] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||socialalchemy.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "socialalchemy.com"] [uri "/db.sql"] [unique_id "Z_SGfyMwJpI4Lhn-sQh_bgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-07 15:31:15
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 11:31:07.219531 2025] [security2:error] [pid 31911:tid 31911] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 11:31:07.219531 2025] [security2:error] [pid 31911:tid 31911] [client 2a0b:f4c2:4::104:32837] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||suefellows.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "suefellows.com"] [uri "/db.sql"] [unique_id "Z_Pvu2WRzSgDMCCvCaZHLAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-04 04:22:15
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 00:22:12.344091 2025] [security2:error] [pid 824435:tid 824435] [client 2a0b:f4c2:4 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 00:22:12.344091 2025] [security2:error] [pid 824435:tid 824435] [client 2a0b:f4c2:4::104:35857] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||globalsolutions.technology|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "globalsolutions.technology"] [uri "/wp-content/database.sql"] [unique_id "Z-9edJfIdC2WxZ0vbq7H1wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-02 14:40:10
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 10:40:04.382549 2025] [security2:error] [pid 3349603:tid 3349603] [client 2a0b:f4c2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 10:40:04.382549 2025] [security2:error] [pid 3349603:tid 3349603] [client 2a0b:f4c2:4::104:32235] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||littlecreekrvranch.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "littlecreekrvranch.com"] [uri "/wp-content/database.sql"] [unique_id "Z-1MRLQi6Sn5IdL9IYSgQAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-02 05:47:50
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 01:47:46.013091 2025] [security2:error] [pid 2451493:tid 2451493] [client 2a0b:f4c2 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 01:47:46.013091 2025] [security2:error] [pid 2451493:tid 2451493] [client 2a0b:f4c2:4::104:7557] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||doctorbalog.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "doctorbalog.com"] [uri "/db.sql"] [unique_id "Z-zPgk07KjSIDGDhly_8_AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-31 11:04:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 31 07:04:19.541356 2025] [security2:error] [pid 9550:tid 9550] [client 2a0b:f4c2:4::10 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 31 07:04:19.541356 2025] [security2:error] [pid 9550:tid 9550] [client 2a0b:f4c2:4::104:56099] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lockdownclaim.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lockdownclaim.com"] [uri "/backup_sample.sql"] [unique_id "Z-p2s89IQh1vu7A5-uUqsgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-29 19:00:39
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 29 15:00:33.781334 2025] [security2:error] [pid 18254:tid 18254] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 29 15:00:33.781334 2025] [security2:error] [pid 18254:tid 18254] [client 2a0b:f4c2:4::104:38453] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tradersworldmarket.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tradersworldmarket.com"] [uri "/t_2023.sql"] [unique_id "Z-hDUUzDP4ippmUZXRpVtgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-27 01:04:06
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 21:04:03.338502 2025] [security2:error] [pid 3478459:tid 3478459] [client 2a0b:f4c2 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 26 21:04:03.338502 2025] [security2:error] [pid 3478459:tid 3478459] [client 2a0b:f4c2:4::104:28585] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenaultartistmanagement.com"] [uri "/wp-config.php_revision"] [unique_id "Z-SkAzM8lZIh88csUtLPdAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-21 02:51:39
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 22:51:34.092537 2025] [security2:error] [pid 12903:tid 12903] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 20 22:51:34.092537 2025] [security2:error] [pid 12903:tid 12903] [client 2a0b:f4c2:4::104:39225] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||meliaethelwoodard.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "meliaethelwoodard.com"] [uri "/users.sql"] [unique_id "Z9zUNvglWxrYnDgavnKqbAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-02 06:28:27
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 02 01:28:21.131096 2025] [security2:error] [pid 31818:tid 31818] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 02 01:28:21.131096 2025] [security2:error] [pid 31818:tid 31818] [client 2a0b:f4c2:4::104:27797] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.daos.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.daos.org"] [uri "/wp-includes/backup.sql"] [unique_id "Z8P6hU6fjGiS68AixKZv8gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-25 15:30:28
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 10:30:24.270749 2025] [security2:error] [pid 10238:tid 10245] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 10:30:24.270749 2025] [security2:error] [pid 10238:tid 10245] [client 2a0b:f4c2:4::104:29543] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sloveniaflyfishing.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sloveniaflyfishing.com"] [uri "/mysql.sql"] [unique_id "Z73iEGIcVUbJ5nlmN7FbvAAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-22 07:30:52
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 22 02:30:44.334358 2025] [security2:error] [pid 19409:tid 19409] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 22 02:30:44.334358 2025] [security2:error] [pid 19409:tid 19409] [client 2a0b:f4c2:4::104:13083] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mhsalumnifoundation.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mhsalumnifoundation.org"] [uri "/installer-data.sql"] [unique_id "Z7l9JJYsOGebSQDRIZemTQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-21 15:14:16
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 10:14:08.564800 2025] [security2:error] [pid 40494:tid 40494] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 10:14:08.564800 2025] [security2:error] [pid 40494:tid 40494] [client 2a0b:f4c2:4::104:28785] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.quickasawink.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.quickasawink.org"] [uri "/mysql.sql"] [unique_id "Z7iYQA2Jq8KjMUO3pd2ywgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-13 06:56:40
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 01:56:34.800363 2025] [security2:error] [pid 18187:tid 18208] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 13 01:56:34.800363 2025] [security2:error] [pid 18187:tid 18208] [client 2a0b:f4c2:4::104:1463] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asetiadi.net"] [uri "/download.php"] [unique_id "Z62XojAbb5ZIB4PrlrVdKgAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-10 14:35:45
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 10 09:35:41.021265 2025] [security2:error] [pid 21846:tid 21846] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::104 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 10 09:35:41.021265 2025] [security2:error] [pid 21846:tid 21846] [client 2a0b:f4c2:4::104:5241] [client 2a0b:f4c2:4::104] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||limadeltadx.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "limadeltadx.org"] [uri "/installer-data.sql"] [unique_id "Z6oOvfWGcJ-XVPb3E8qW3QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
