🇺🇸
TPI-Abuse
2025-12-05 12:00:35
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 07:00:31.242759 2025] [security2:error] [pid 30251:tid 30251] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 07:00:31.242759 2025] [security2:error] [pid 30251:tid 30251] [client 2001:67c:289c:2::35:47800] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||stinsonbeachsurfandkayak.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stinsonbeachsurfandkayak.com"] [uri "/stinsonbeachsurfandkayak_com.sql"] [unique_id "aTLJXz39sTk9BO-uA7t-zgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 09:09:29
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:09:26.305936 2025] [security2:error] [pid 12592:tid 12592] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:09:26.305936 2025] [security2:error] [pid 12592:tid 12592] [client 2001:67c:289c:2::35:55992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||odysseydogasporlari.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "odysseydogasporlari.com"] [uri "/odysseydogas.sql"] [unique_id "aTKhRtkK_12nh9LO5iwZ5gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 00:03:25
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:03:16.901632 2025] [security2:error] [pid 28903:tid 28903] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 19:03:16.901632 2025] [security2:error] [pid 28903:tid 28903] [client 2001:67c:289c:2::35:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||southernbroadcast.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "southernbroadcast.com"] [uri "/southern.sql"] [unique_id "aTIhRAEdtweADF3ru3I4tQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 20:32:24
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:32:16.398600 2025] [security2:error] [pid 23379:tid 23403] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 15:32:16.398600 2025] [security2:error] [pid 23379:tid 23403] [client 2001:67c:289c:2::35:33454] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.property-management-companies-chicago.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.property-management-companies-chicago.com"] [uri "/property-management-companies-chica.sql"] [unique_id "aSoG0IE9m2siX8zGP_EAUwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-28 08:06:16
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 03:06:09.858567 2025] [security2:error] [pid 13888:tid 13888] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 03:06:09.858567 2025] [security2:error] [pid 13888:tid 13888] [client 2001:67c:289c:2::35:55122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||toepferlab.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "toepferlab.org"] [uri "/.sql"] [unique_id "aSlX8c6rWQzD9r7sdOXpjQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 02:30:56
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:30:48.516007 2025] [security2:error] [pid 10049:tid 10049] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:30:48.516007 2025] [security2:error] [pid 10049:tid 10049] [client 2001:67c:289c:2::35:51534] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gasoilliquidsdaily.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gasoilliquidsdaily.com"] [uri "/iquidsdaily.sql"] [unique_id "aSPDWOEljVRzisILVns-BgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-23 07:00:45
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 02:00:38.839278 2025] [security2:error] [pid 32110:tid 32110] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 02:00:38.839278 2025] [security2:error] [pid 32110:tid 32110] [client 2001:67c:289c:2::35:52840] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||marianozaro.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "marianozaro.com"] [uri "/mari.sql"] [unique_id "aSKxFjuviZF47yxsmitFRAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-18 05:52:42
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 00:52:34.617795 2025] [security2:error] [pid 10478:tid 10478] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 18 00:52:34.617795 2025] [security2:error] [pid 10478:tid 10478] [client 2001:67c:289c:2::35:43954] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.beirutbazar.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.beirutbazar.com"] [uri "/azar_com.sql"] [unique_id "aRwJooBZEVoG9J3R4t038wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-14 22:18:42
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 17:18:39.531887 2025] [security2:error] [pid 22688:tid 22688] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 17:18:39.531887 2025] [security2:error] [pid 22688:tid 22688] [client 2001:67c:289c:2::35:46030] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dancingorchidvillas.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dancingorchidvillas.com"] [uri "/wp.sql"] [unique_id "aReqv6aizeJMNgkgSbocLwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-11 21:00:31
UTC ·
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 16:00:23.274051 2025] [security2:error] [pid 11603:tid 11603] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 16:00:23.274051 2025] [security2:error] [pid 11603:tid 11603] [client 2001:67c:289c:2::35:43136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jazziiafoundation.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jazziiafoundation.org"] [uri "/iiafoundation.sql"] [unique_id "aROj5wWLnZzH9K9Y9ky0TQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-06 18:16:05
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 13:16:00.259172 2025] [security2:error] [pid 14586:tid 14586] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 13:16:00.259172 2025] [security2:error] [pid 14586:tid 14586] [client 2001:67c:289c:2::35:32798] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ultratecnologia.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ultratecnologia.com"] [uri "/ogia.sql"] [unique_id "aQzl4JCZxH-Y4Ltl1WR5FQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-13 14:13:47
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 10:13:38.011235 2025] [security2:error] [pid 1028:tid 1028] [cl ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 10:13:38.011235 2025] [security2:error] [pid 1028:tid 1028] [client 2001:67c:289c:2::35:39796] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||metcomarine.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "metcomarine.com"] [uri "/tcomarine.sql"] [unique_id "aO0JEgwOhfuLBQVUprQ7jAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-11 03:36:32
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 23:36:24.239418 2025] [security2:error] [pid 13450:tid 13450] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 10 23:36:24.239418 2025] [security2:error] [pid 13450:tid 13450] [client 2001:67c:289c:2::35:35074] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||americanureport.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "americanureport.com"] [uri "/ericanureport.sql"] [unique_id "aOnQuO0aLG6ohnfXO0XS-wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-08 14:18:40
UTC ·
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 10:18:35.562953 2025] [security2:error] [pid 11237:tid 11237] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::35 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 10:18:35.562953 2025] [security2:error] [pid 11237:tid 11237] [client 2001:67c:289c:2::35:43658] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||comicpreservation.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comicpreservation.com"] [uri "/comicpreservation.sql"] [unique_id "aOZyu-OLkayZ0rQVBdpF_AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2025-10-08 05:54:36
UTC ·
(1 year ago)
Blocked by UFW (TCP on 9999)
Source port: 55214
Packet length: 80
This report (for 2001:067c:289c:0002:0000:0000:0000:0035) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Ping of Death
Port Scan