🇺🇸
TPI-Abuse
2025-06-30 20:12:03
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 16:11:58.194328 2025] [security2:error] [pid 9335:tid 9335] [client 2a10:8a40:f31 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 16:11:58.194328 2025] [security2:error] [pid 9335:tid 9335] [client 2a10:8a40:f313::29:42138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sierra-broadcasting.com"] [uri "/.git/config"] [unique_id "aGLvjgR-Gmy_SB7q0s25nQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-30 15:24:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 11:24:16.003820 2025] [security2:error] [pid 32566:tid 32566] [client 2a10:8a40:f ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 11:24:16.003820 2025] [security2:error] [pid 32566:tid 32566] [client 2a10:8a40:f313::29:45092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.renardpoche.com"] [uri "/.git/config"] [unique_id "aGKsIIvCh3YuKV0JogLUoQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-30 11:15:28
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 07:15:24.650340 2025] [security2:error] [pid 26838:tid 26838] [client 2a10:8a40:f ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 30 07:15:24.650340 2025] [security2:error] [pid 26838:tid 26838] [client 2a10:8a40:f313::29:49388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.wmodradio.com"] [uri "/.git/config"] [unique_id "aGJxzAfhA8YF89UMaLJMmgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-30 01:32:19
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 21:32:15.238503 2025] [security2:error] [pid 2659021:tid 2659034] [client 2a10:8a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 21:32:15.238503 2025] [security2:error] [pid 2659021:tid 2659034] [client 2a10:8a40:f313::29:36366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theyogicat.com"] [uri "/.git/config"] [unique_id "aGHpH67C14yS0nls40-y-wAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-29 23:17:29
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 19:17:24.646712 2025] [security2:error] [pid 693471:tid 693471] [client 2a10:8a40 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 29 19:17:24.646712 2025] [security2:error] [pid 693471:tid 693471] [client 2a10:8a40:f313::29:50426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.davidmoisan.org"] [uri "/.git/config"] [unique_id "aGHJhD-rOOHrBn_r9QexqQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-22 07:03:49
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 03:03:43.264155 2025] [security2:error] [pid 810732:tid 810732] [client 2a10:8a40 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 03:03:43.264155 2025] [security2:error] [pid 810732:tid 810732] [client 2a10:8a40:f313::29:55436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.restaurantfurnituremart.com"] [uri "/.git/config"] [unique_id "aFeqz4oYaez2VaNAkAvljgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-17 18:51:17
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 17 14:51:09.604971 2025] [security2:error] [pid 337768:tid 337902] [client 2a10:8a40 ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 17 14:51:09.604971 2025] [security2:error] [pid 337768:tid 337902] [client 2a10:8a40:f313::29:58488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bakmail.net"] [uri "/.git/config"] [unique_id "aFG5HbYSPMvZqNKy0iuP2QAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-12 17:10:53
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 13:10:47.953859 2025] [security2:error] [pid 1353229:tid 1353229] [client 2a10:8a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 13:10:47.953859 2025] [security2:error] [pid 1353229:tid 1353229] [client 2a10:8a40:f313::29:45734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.femalegamblers.org"] [uri "/.git/config"] [unique_id "aEsKF8OK2lmAw9tEwdW3PgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-05-29 09:30:14
UTC ·
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2025-05-11 02:44:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 10 22:44:16.956336 2025] [security2:error] [pid 2977734:tid 2977734] [client 2a10:8a ...
show more
(mod_security) mod_security (id:210492) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 10 22:44:16.956336 2025] [security2:error] [pid 2977734:tid 2977734] [client 2a10:8a40:f313::29:36966] [client 2a10:8a40:f313::29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.iberhome.net"] [uri "/.git/config"] [unique_id "aCAPAK9Tj3N-jgIT6YQIbAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2025-05-09 03:26:00
UTC ·
(1 year ago)
Multiple critical ModSecurity events
...
Web Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2025-05-07 13:30:31
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 09:30:27.321003 2025] [security2:error] [pid 2624197:tid 2624197] [client 2a10:8a ...
show more
(mod_security) mod_security (id:210730) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 07 09:30:27.321003 2025] [security2:error] [pid 2624197:tid 2624197] [client 2a10:8a40:f313::29:52830] [client 2a10:8a40:f313::29] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||yuichiro.us|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "yuichiro.us"] [uri "/bd.sql"] [unique_id "aBtgc4-CYbEj0mJjpUk_owAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2025-04-23 09:09:57
UTC ·
(1 year ago)
Wordpress login attempts
Brute-Force
🇺🇸
TPI-Abuse
2025-04-19 04:04:03
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 00:03:56.947006 2025] [security2:error] [pid 23678:tid 23678] [client 2a10:8a40:f ...
show more
(mod_security) mod_security (id:210730) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 00:03:56.947006 2025] [security2:error] [pid 23678:tid 23678] [client 2a10:8a40:f313::29:42232] [client 2a10:8a40:f313::29] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||williamfitzsimmons.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "williamfitzsimmons.com"] [uri "/immons-2023.sql"] [unique_id "aAMgrFAMThrY2433TYTUWAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-19 01:56:37
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 21:56:34.765029 2025] [security2:error] [pid 12275:tid 12275] [client 2a10:8a40:f ...
show more
(mod_security) mod_security (id:210730) triggered by 2a10:8a40:f313::29 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 21:56:34.765029 2025] [security2:error] [pid 12275:tid 12275] [client 2a10:8a40:f313::29:40580] [client 2a10:8a40:f313::29] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deborahbein.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deborahbein.com"] [uri "/administrator/backups/database.sql"] [unique_id "aAMC0qs4dsbtm2hDpWPodQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
