2001:67c:289c:2::40

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 07:51:52.163601 2025] [security2:error] [pid 17942:tid 17942] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 07:51:52.163601 2025] [security2:error] [pid 17942:tid 17942] [client 2001:67c:289c:2::40:42404] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||assistfeed.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "assistfeed.com"] [uri "/assistfeed_com.sql"] [unique_id "aTGD6H3KLh5fwBxVzb1viQAAABM"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 07:02:41.507268 2025] [security2:error] [pid 11927:tid 11927] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 07:02:41.507268 2025] [security2:error] [pid 11927:tid 11927] [client 2001:67c:289c:2::40:48056] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||radicalchange.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "radicalchange.org"] [uri "/latest.sql"] [unique_id "aTF4YTH0dprdC-5qvDdjFQAAABE"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 05:30:49.473090 2025] [security2:error] [pid 12968:tid 12968] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 05:30:49.473090 2025] [security2:error] [pid 12968:tid 12968] [client 2001:67c:289c:2::40:51350] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jeffmasonmusic.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jeffmasonmusic.com"] [uri "/jef.sql"] [unique_id "aTFi2fs2vWnhONgcIq3ppgAAAAE"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 01:36:43.999971 2025] [security2:error] [pid 16695:tid 16695] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 01:36:43.999971 2025] [security2:error] [pid 16695:tid 16695] [client 2001:67c:289c:2::40:42280] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rodzillacharters.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rodzillacharters.com"] [uri "/dzillacharters_com.sql"] [unique_id "aS_aexdFnuuxfaOUal4VtgAAAB4"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 16:05:11.266722 2025] [security2:error] [pid 23004:tid 23004] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 16:05:11.266722 2025] [security2:error] [pid 23004:tid 23004] [client 2001:67c:289c:2::40:57130] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gilgoinn.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gilgoinn.com"] [uri "/bck.sql"] [unique_id "aS4DB8UJXXzifBBKFFlk1QAAAAk"] show less

404 errors (Vulnerability scan)

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 01:43:20.261207 2025] [security2:error] [pid 3129:tid 3129] [cl ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 01:43:20.261207 2025] [security2:error] [pid 3129:tid 3129] [client 2001:67c:289c:2::40:36952] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||toepferlab.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "toepferlab.org"] [uri "/ferlab.sql"] [unique_id "aRbPiEIWSi_VRJix-GRrBwAAABc"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 21:22:46.840695 2025] [security2:error] [pid 6130:tid 6130] [cl ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 21:22:46.840695 2025] [security2:error] [pid 6130:tid 6130] [client 2001:67c:289c:2::40:43642] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jazziientertainment.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jazziientertainment.com"] [uri "/ertainment.sql"] [unique_id "aRPvdjk8_7VkMC1b7nuB8QAAABE"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 01:26:40.625413 2025] [security2:error] [pid 1072:tid 1072] [cl ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 09 01:26:40.625413 2025] [security2:error] [pid 1072:tid 1072] [client 2001:67c:289c:2::40:39854] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||prayers4america.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "prayers4america.com"] [uri "/prayers4ame.sql"] [unique_id "aRA0IIOmK0a60ilawHjrSAAAAAI"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 11:44:41.016738 2025] [security2:error] [pid 23359:tid 23359] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 11:44:41.016738 2025] [security2:error] [pid 23359:tid 23359] [client 2001:67c:289c:2::40:45516] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||caribef.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caribef.com"] [uri "/ibef.sql"] [unique_id "aQoteTGZanYHxA2ELdAbOQAAAAs"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 02:36:58.326889 2025] [security2:error] [pid 32514:tid 32514] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 19 02:36:58.326889 2025] [security2:error] [pid 32514:tid 32514] [client 2001:67c:289c:2::40:56480] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||trunutraceuticals.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "trunutraceuticals.com"] [uri "/tr.sql"] [unique_id "aPSHClaTwHE9-WjeZltatAAAAAU"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 14 20:31:11.344697 2025] [security2:error] [pid 19866:tid 19866] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 14 20:31:11.344697 2025] [security2:error] [pid 19866:tid 19866] [client 2001:67c:289c:2::40:37052] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||modalguitarist.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "modalguitarist.com"] [uri "/itarist.sql"] [unique_id "aO7rTxUAi2lqVE2z4JwedwAAAAo"] show less

Blocked by UFW (TCP on 8333) Source port: 33524 Packet length: 80 This report (for 2001:067c:289c:0002:0000:0000:0000:0040) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 11:17:08.115186 2025] [security2:error] [pid 17418:tid 17418] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 08 11:17:08.115186 2025] [security2:error] [pid 17418:tid 17418] [client 2001:67c:289c:2::40:59292] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||pinebrookdesign.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pinebrookdesign.com"] [uri "/wordpress.sql"] [unique_id "aOaAdCzmoUORNI2Hr7gIRwAAAA4"] show less

(mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 05 02:16:00.867099 2025] [security2:error] [pid 18895:tid 18895] [ ... show more (mod_security) mod_security (id:210730) triggered by 2001:67c:289c:2::40 (tor-exit-read-me.dfri.se): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 05 02:16:00.867099 2025] [security2:error] [pid 18895:tid 18895] [client 2001:67c:289c:2::40:36232] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hawaiivacations.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hawaiivacations.com"] [uri "/ww.sql"] [unique_id "aOINIGjuqU0Al-0rto2mCAAAAAQ"] show less