🇺🇸
TPI-Abuse
2025-10-01 13:32:06
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 09:32:01.588103 2025] [security2:error] [pid 13252:tid 13333] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 09:32:01.588103 2025] [security2:error] [pid 13252:tid 13333] [client 2a0f:df00:0:255::201:37146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fastestcopyright.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fastestcopyright.com"] [uri "/fastestc.sql"] [unique_id "aN0tUWk87U_zj1XgHAIhgAAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-27 21:13:19
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 17:13:13.292876 2025] [security2:error] [pid 2048455:tid 2048499] [client 2a0f: ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 17:13:13.292876 2025] [security2:error] [pid 2048455:tid 2048499] [client 2a0f:df00:0:255::201:51468] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.property-management-companies-chicago.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.property-management-companies-chicago.com"] [uri "/prop.sql"] [unique_id "aNhTaXZQW2LwzlncqbBeCAAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-27 12:42:49
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 08:42:42.697922 2025] [security2:error] [pid 25138:tid 25138] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 08:42:42.697922 2025] [security2:error] [pid 25138:tid 25138] [client 2a0f:df00:0:255::201:56370] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||goseethenurse.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "goseethenurse.com"] [uri "/oseethenurse.sql"] [unique_id "aNfbwqUiJge9MG_8BRQXJgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 14:38:59
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 10:38:52.358502 2025] [security2:error] [pid 24802:tid 24802] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 10:38:52.358502 2025] [security2:error] [pid 24802:tid 24802] [client 2a0f:df00:0:255::201:37066] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||engine-watch.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "engine-watch.com"] [uri "/ngine-watch.sql"] [unique_id "aNFffBFL_rXzxlBDFK-vNQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-21 13:19:45
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 09:19:39.018129 2025] [security2:error] [pid 10162:tid 10162] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 09:19:39.018129 2025] [security2:error] [pid 10162:tid 10162] [client 2a0f:df00:0:255::201:46698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||suefellows.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "suefellows.com"] [uri "/suefello.sql"] [unique_id "aM_7a8YhbM-j62gpWxwCWwAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-18 18:33:12
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 14:33:06.370396 2025] [security2:error] [pid 4155:tid 4155] [client 2a0f:df00:0 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 14:33:06.370396 2025] [security2:error] [pid 4155:tid 4155] [client 2a0f:df00:0:255::201:44352] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||robertgregorybrowne.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "robertgregorybrowne.com"] [uri "/tgregorybrowne.sql"] [unique_id "aMxQYtUmhuNe99j_hy1arQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-17 19:37:09
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 15:37:05.524858 2025] [security2:error] [pid 13423:tid 13423] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 15:37:05.524858 2025] [security2:error] [pid 13423:tid 13423] [client 2a0f:df00:0:255::201:57596] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||firejasstrio.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firejasstrio.com"] [uri "/firejasstrio.sql"] [unique_id "aMsN4Tk88g3xNKLI1yrHRwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 17:07:48
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 13:07:38.909716 2025] [security2:error] [pid 21670:tid 21670] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 13:07:38.909716 2025] [security2:error] [pid 21670:tid 21670] [client 2a0f:df00:0:255::201:39748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisdomworkforceoptimization.com"] [uri "/wp-config.php.zip"] [unique_id "aMMB2tg__NxcF__apNqr3QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-04 04:19:59
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 00:19:51.254154 2025] [security2:error] [pid 10708:tid 10708] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 00:19:51.254154 2025] [security2:error] [pid 10708:tid 10708] [client 2a0f:df00:0:255::201:51794] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||applemaccomputerconsulting.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "applemaccomputerconsulting.com"] [uri "/ng.sql"] [unique_id "aLkTZw7kIMvR0ipfxpXg9QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2025-09-01 04:22:50
UTC ·
(1 year ago)
Wordpress login attempts
Brute-Force
🇺🇸
TPI-Abuse
2025-08-31 13:23:54
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 09:23:47.562683 2025] [security2:error] [pid 5658:tid 5658] [client 2a0f:df00:0 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 09:23:47.562683 2025] [security2:error] [pid 5658:tid 5658] [client 2a0f:df00:0:255::201:57946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.convoyforkids.com"] [uri "/wp-config.php.txt.zip"] [unique_id "aLRM42gRhMotm615wY1gIQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-25 17:30:21
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 25 13:30:11.902075 2025] [security2:error] [pid 20988:tid 21022] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 25 13:30:11.902075 2025] [security2:error] [pid 20988:tid 21022] [client 2a0f:df00:0:255::201:37098] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gmentz.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gmentz.com"] [uri "/.sql"] [unique_id "aKydo_7P188_OIlRFj2yhgAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-24 04:45:22
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 00:45:11.965699 2025] [security2:error] [pid 18031:tid 18031] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 00:45:11.965699 2025] [security2:error] [pid 18031:tid 18031] [client 2a0f:df00:0:255::201:47700] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.silalaw.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.silalaw.com"] [uri "/silal.sql"] [unique_id "aKqY14Os6f91kJJUcT8uFwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-24 00:41:24
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 20:41:17.403092 2025] [security2:error] [pid 29342:tid 29342] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 20:41:17.403092 2025] [security2:error] [pid 29342:tid 29342] [client 2a0f:df00:0:255::201:50444] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||eta-mct.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "eta-mct.com"] [uri "/eta-m.sql"] [unique_id "aKpfrXzin-x5HxM6UBzYNgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-19 22:59:09
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 19 18:59:00.635141 2025] [security2:error] [pid 16950:tid 16950] [client 2a0f:df00 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0f:df00:0:255::201 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 19 18:59:00.635141 2025] [security2:error] [pid 16950:tid 16950] [client 2a0f:df00:0:255::201:34396] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||blacksheepoffroad.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blacksheepoffroad.com"] [uri "/cksheepoffroad.sql"] [unique_id "aKUBtPP_o1YVFJkPD2P2hwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
