🇺🇸
TPI-Abuse
2025-12-06 01:46:46
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 20:46:41.290956 2025] [security2:error] [pid 8835:tid 8835] [client 2a0b:f4c2:4::10 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 20:46:41.290956 2025] [security2:error] [pid 8835:tid 8835] [client 2a0b:f4c2:4::108:22817] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||heatherweathers.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "heatherweathers.com"] [uri "/heatherweather.sql"] [unique_id "aTOLAQYb8bf5QeHMZXyOSgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 20:32:09
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 15:32:04.759590 2025] [security2:error] [pid 21643:tid 21643] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 15:32:04.759590 2025] [security2:error] [pid 21643:tid 21643] [client 2a0b:f4c2:4::108:6791] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||leirstein.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "leirstein.com"] [uri "/leirstei.sql"] [unique_id "aTHvxEdepC2h0Pl3HDVgDQAAAGY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 18:31:16
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 13:31:03.640574 2025] [security2:error] [pid 6454:tid 6468] [client 2a0b:f4c2:4::10 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 13:31:03.640574 2025] [security2:error] [pid 6454:tid 6468] [client 2a0b:f4c2:4::108:42987] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||michaelrandon.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelrandon.com"] [uri "/andon.sql"] [unique_id "aTHTZ1nbnskLcR1DlKUEWAAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 16:17:14
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 11:17:09.529011 2025] [security2:error] [pid 31492:tid 31492] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 11:17:09.529011 2025] [security2:error] [pid 31492:tid 31492] [client 2a0b:f4c2:4::108:25115] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aandbnaturalfoods.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aandbnaturalfoods.com"] [uri "/ndbnaturalfoods.sql"] [unique_id "aTG0BX-EyH_7TeRyVtPx-QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 12:51:44
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 07:51:37.623327 2025] [security2:error] [pid 17334:tid 17334] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 07:51:37.623327 2025] [security2:error] [pid 17334:tid 17334] [client 2a0b:f4c2:4::108:28013] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||assistfeed.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "assistfeed.com"] [uri "/a.sql"] [unique_id "aTGD2SNRq_5c8q4IOGC4mgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 10:31:21
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 05:31:14.304240 2025] [security2:error] [pid 13413:tid 13413] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 05:31:14.304240 2025] [security2:error] [pid 13413:tid 13413] [client 2a0b:f4c2:4::108:17053] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jeffmasonmusic.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jeffmasonmusic.com"] [uri "/jeffmasonm.sql"] [unique_id "aTFi8hhjbgBdCprpbQcGZAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2025-12-04 06:03:16
UTC ·
(11 months ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-03 10:56:18
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 05:56:15.515760 2025] [security2:error] [pid 1524:tid 1524] [client 2a0b:f4c2:4::10 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 05:56:15.515760 2025] [security2:error] [pid 1524:tid 1524] [client 2a0b:f4c2:4::108:57331] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.masalamadrid.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.masalamadrid.com"] [uri "/madrid.sql"] [unique_id "aTAXT0sSoOyAo8lETQxmUQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 16:19:27
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 11:19:21.769489 2025] [security2:error] [pid 25334:tid 25334] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 11:19:21.769489 2025] [security2:error] [pid 25334:tid 25334] [client 2a0b:f4c2:4::108:16195] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||applemaccomputerconsulting.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "applemaccomputerconsulting.com"] [uri "/applemaccomputerconsu.sql"] [unique_id "aSh6CQnj9rbGZHyUD05PAgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2025-11-23 21:12:14
UTC ·
(11 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-11-16 08:13:08
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 03:13:02.236593 2025] [security2:error] [pid 14446:tid 14446] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 03:13:02.236593 2025] [security2:error] [pid 14446:tid 14446] [client 2a0b:f4c2:4::108:43977] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||adoniahenterprises.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adoniahenterprises.com"] [uri "/nterprises.sql"] [unique_id "aRmHjp-1UUx36JRIyA8vZwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 04:57:23
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 23:57:18.544735 2025] [security2:error] [pid 28357:tid 28357] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 23:57:18.544735 2025] [security2:error] [pid 28357:tid 28357] [client 2a0b:f4c2:4::108:64727] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||misogynyis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "misogynyis.com"] [uri "/isogynyis.sql"] [unique_id "aRgILtE5EtCvLOTAnzmCaAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-08 23:34:29
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 18:34:21.808578 2025] [security2:error] [pid 27640:tid 27640] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 18:34:21.808578 2025] [security2:error] [pid 27640:tid 27640] [client 2a0b:f4c2:4::108:3681] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||prayers4america.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "prayers4america.com"] [uri "/prayers4ame.sql"] [unique_id "aQ_TfVFVT2E_4nHbgK4t_wAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 04:31:28
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 00:31:22.756544 2025] [security2:error] [pid 25338:tid 25338] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 00:31:22.756544 2025] [security2:error] [pid 25338:tid 25338] [client 2a0b:f4c2:4::108:40391] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||naominixon.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "naominixon.com"] [uri "/daily.sql"] [unique_id "aPmvmnwW-gLQlzRQQHGLawAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-19 06:56:58
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 02:56:54.119059 2025] [security2:error] [pid 16690:tid 16690] [client 2a0b:f4c2:4:: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:4::108 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 02:56:54.119059 2025] [security2:error] [pid 16690:tid 16690] [client 2a0b:f4c2:4::108:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ruralcommunitycare.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ruralcommunitycare.org"] [uri "/.sql"] [unique_id "aPSLttoZCuVHzzt8SaxxfQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
