🇺🇸
TPI-Abuse
2025-04-21 06:16:19
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 02:16:11.320247 2025] [security2:error] [pid 9565:tid 9565] [client 51.89.242.51:62283] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.clubfansite.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.clubfansite.com"] [uri "/backup.sql"] [unique_id "aAXiq0ufq0iODY0YP4syXAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-04-20 22:05:35
(1 year ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 07:19:00
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 03:18:55.420399 2025] [security2:error] [pid 1708642:tid 1708642] [client 51.89.242.51:49273] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bvi-boat-registration.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bvi-boat-registration.com"] [uri "/backup.sql"] [unique_id "aASf30uN4RdrHcIVMSZujwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 05:21:46
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 01:21:38.233374 2025] [security2:error] [pid 17649:tid 17649] [client 51.89.242.51:59240] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bandpd.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bandpd.com"] [uri "/backup.sql"] [unique_id "aASEYq0x_5BvvyARJQGbxwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-04-19 21:05:03
(1 year ago)
Too many Status 40X (45)
Brute-Force
Web App Attack
🇺🇸
mnsf
2025-04-18 20:05:16
(1 year ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
🇺🇸
mnsf
2025-04-16 21:05:18
(1 year ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-04-16 06:29:29
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 16 02:29:24.364686 2025] [security2:error] [pid 100948:tid 100948] [client 51.89.242.51:58775] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.winecellarinstallationservices.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.winecellarinstallationservices.com"] [uri "/backup.sql"] [unique_id "Z_9ORJRXPBv6nqOXO6SMSQAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-06 13:22:29
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 06 09:22:23.242882 2025] [security2:error] [pid 3480111:tid 3480111] [client 51.89.242.51:61051] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fundingworkingcapital.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fundingworkingcapital.com"] [uri "/backup.sql"] [unique_id "Z_KADyvP1xkFW7_wLVxeDgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-06 10:05:20
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 06 06:05:13.863463 2025] [security2:error] [pid 11357:tid 11357] [client 51.89.242.51:63975] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gafmusic.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gafmusic.com"] [uri "/backup.sql"] [unique_id "Z_JR2SSOmWELvLwpfonrSwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-04-06 07:05:13
(1 year ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
🇳🇿
Tripwire
2025-04-05 10:32:38
(1 year ago)
Scanning for backup files - /backup.zip
Web App Attack
🇺🇸
mnsf
2025-04-05 00:05:19
(1 year ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-04-04 22:32:25
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 18:32:18.428567 2025] [security2:error] [pid 28547:tid 28547] [client 51.89.242.51:64584] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.luxebikinis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.luxebikinis.com"] [uri "/backup.sql"] [unique_id "Z_Bd8jo_E556m9PrsQYuLQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-04 18:11:47
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 51.89.242.51 (ip51.ip-51-89-242.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 14:11:39.316334 2025] [security2:error] [pid 7301:tid 7301] [client 51.89.242.51:50959] [client 51.89.242.51] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.maleein.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.maleein.com"] [uri "/backup.sql"] [unique_id "Z_Ag2ynziBZ-J4XylujujAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack