🇺🇸
TPI-Abuse
2025-12-12 00:02:35
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 19:02:29.518556 2025] [security2:error] [pid 18569:tid 18569] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 19:02:29.518556 2025] [security2:error] [pid 18569:tid 18569] [client 2001:67c:289c:2::35:56612] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||natickvillagerentals.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "natickvillagerentals.com"] [uri "/tals_com.sql"] [unique_id "aTtblQlPOdwXEa853Fq9CAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 20:51:40
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 15:51:34.412600 2025] [security2:error] [pid 12348:tid 12348] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 15:51:34.412600 2025] [security2:error] [pid 12348:tid 12348] [client 2001:67c:289c:2::35:47528] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||studioyau.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "studioyau.com"] [uri "/backupwp.sql"] [unique_id "aTsu1qeA6zLOZB_aHURhGwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2025-12-10 02:54:29
UTC ·
(10 months ago)
2025-12-10 @ 03:54:29 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇺🇸
TPI-Abuse
2025-12-10 00:01:20
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 19:01:14.319013 2025] [security2:error] [pid 13681:tid 13681] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 19:01:14.319013 2025] [security2:error] [pid 13681:tid 13681] [client 2001:67c:289c:2::35:35356] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jeffmccoskey.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jeffmccoskey.com"] [uri "/coskey_com.sql"] [unique_id "aTi4SmbZJF2CgaWh2qTWFgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 04:16:32
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 23:16:26.189979 2025] [security2:error] [pid 4593:tid 4593] [cl ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 23:16:26.189979 2025] [security2:error] [pid 4593:tid 4593] [client 2001:67c:289c:2::35:53596] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||drwolberg.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drwolberg.com"] [uri "/dump.sql"] [unique_id "aTeimlHezSJF5nx1VVJmaQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 10:14:14
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 05:14:08.399335 2025] [security2:error] [pid 19444:tid 19444] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 05:14:08.399335 2025] [security2:error] [pid 19444:tid 19444] [client 2001:67c:289c:2::35:33630] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||christineaholtz.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "christineaholtz.com"] [uri "/neaholtz_com.sql"] [unique_id "aTak8PGkcCVfgWc55wfI1QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 07:02:08
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 02:02:03.873798 2025] [security2:error] [pid 29201:tid 29201] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 02:02:03.873798 2025] [security2:error] [pid 29201:tid 29201] [client 2001:67c:289c:2::35:52762] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||firstunitedreserve.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firstunitedreserve.com"] [uri "/backupdb.sql"] [unique_id "aTZ36xZK0zWCyYIT4tO3YgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 01:06:54
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:06:43.303499 2025] [security2:error] [pid 30757:tid 30757] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:06:43.303499 2025] [security2:error] [pid 30757:tid 30757] [client 2001:67c:289c:2::35:37682] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||losbarbarosdelnorte.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "losbarbarosdelnorte.com"] [uri "/losbarbarosdelno.sql"] [unique_id "aTYko4hTdr-HfRisJB5cuAAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 19:52:55
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 14:52:49.799369 2025] [security2:error] [pid 26531:tid 26531] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 14:52:49.799369 2025] [security2:error] [pid 26531:tid 26531] [client 2001:67c:289c:2::35:56044] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.method1.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.method1.net"] [uri "/metho.sql"] [unique_id "aTXbEY4oKGGcQ1l0iRnPrgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 14:00:59
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:00:52.262246 2025] [security2:error] [pid 3186:tid 3186] [cl ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 09:00:52.262246 2025] [security2:error] [pid 3186:tid 3186] [client 2001:67c:289c:2::35:52284] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rootsofwellnessayurveda.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rootsofwellnessayurveda.com"] [uri "/bck.sql"] [unique_id "aTWIlFxgld9rvPh9m2JJcAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 02:37:51
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 21:37:45.598854 2025] [security2:error] [pid 21829:tid 21829] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 21:37:45.598854 2025] [security2:error] [pid 21829:tid 21829] [client 2001:67c:289c:2::35:51852] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cms2020.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cms2020.com"] [uri "/cms20.sql"] [unique_id "aTToefLan89EbFNeZbEhVAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 20:15:08
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 15:14:59.199257 2025] [security2:error] [pid 15072:tid 15072] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 15:14:59.199257 2025] [security2:error] [pid 15072:tid 15072] [client 2001:67c:289c:2::35:55684] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fltsiminc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fltsiminc.com"] [uri "/c_com.sql"] [unique_id "aTSOwwTaEI0xybFCBpHnnwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 04:25:33
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 23:25:24.403036 2025] [security2:error] [pid 4844:tid 4851] [cl ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 23:25:24.403036 2025] [security2:error] [pid 4844:tid 4851] [client 2001:67c:289c:2::35:43266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||marilynoakes.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "marilynoakes.com"] [uri "/arilynoakes_com.sql"] [unique_id "aTOwNCTRl20NCFVkzHto1gAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 16:35:40
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 11:35:32.295749 2025] [security2:error] [pid 8096:tid 8138] [cl ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 11:35:32.295749 2025] [security2:error] [pid 8096:tid 8138] [client 2001:67c:289c:2::35:45642] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||iancaird.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iancaird.com"] [uri "/iancaird_com.sql"] [unique_id "aTMJ1KSJWUPPJKuduKE8RQAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 13:45:47
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 08:45:39.561118 2025] [security2:error] [pid 9994:tid 9994] [cl ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 08:45:39.561118 2025] [security2:error] [pid 9994:tid 9994] [client 2001:67c:289c:2::35:48472] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pyxelstudios.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pyxelstudios.com"] [uri "/yxelstudios_com.sql"] [unique_id "aTLiA45ScbIaMLclMNEKgQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
