🇺🇸
agenciahypelab.com.br
2025-09-18 11:48:08
(1 year ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-09-17 18:02:44
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 14:02:40.994411 2025] [security2:error] [pid 2100:tid 2100] [client 2001:67c:6ec:203:192:42:116:185:44162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgegourmet.com"] [uri "/wp-config.php.zip"] [unique_id "aMr3wN9tXMB02F0jSBIK3QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-17 02:31:55
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 22:31:48.673983 2025] [security2:error] [pid 20048:tid 20048] [client 2001:67c:6ec:203:192:42:116:185:56268] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||radicalchange.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "radicalchange.org"] [uri "/radic.sql"] [unique_id "aModlKdv2l-Ft5JyEuDeAQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 22:29:40
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 18:29:36.872385 2025] [security2:error] [pid 876:tid 876] [client 2001:67c:6ec:203:192:42:116:185:60206] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ritterlien.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ritterlien.com"] [uri "/rit.sql"] [unique_id "aMnk0LQ2rx517MHGw_byqQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 09:39:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 05:39:15.464978 2025] [security2:error] [pid 31749:tid 31749] [client 2001:67c:6ec:203:192:42:116:185:62455] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||trinitydent.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "trinitydent.com"] [uri "/wp.sql"] [unique_id "aMkwQwUn0J5o2z6zo2ANDQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 01:43:06
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 15 21:42:58.152179 2025] [security2:error] [pid 19885:tid 19885] [client 2001:67c:6ec:203:192:42:116:185:34289] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||citrineartstudio.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "citrineartstudio.com"] [uri "/rineartstudio_com.sql"] [unique_id "aMjAop2TN6BDN3knpTUrYgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-14 23:14:46
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 19:14:37.145510 2025] [security2:error] [pid 11569:tid 11569] [client 2001:67c:6ec:203:192:42:116:185:14379] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||forerunnersjazz.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "forerunnersjazz.org"] [uri "/forerunnersjazz.sql"] [unique_id "aMdMXY52FSoDQry68sDHtwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
afleventoffice.com.au
2025-09-14 23:05:04
(1 year ago)
GET /administrator/ HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2025-09-13 07:44:53
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210492) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 03:44:47.154269 2025] [security2:error] [pid 27408:tid 27408] [client 2001:67c:6ec:203:192:42:116:185:14003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextngnr.com"] [uri "/wp-config.php.zip"] [unique_id "aMUg78VjqEa5yf7rLi83tgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-09-13 05:02:11
(1 year ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-11 19:33:15
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 15:33:11.556898 2025] [security2:error] [pid 12603:tid 12603] [client 2001:67c:6ec:203:192:42:116:185:36859] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||arapi.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "arapi.org"] [uri "/rapi.sql"] [unique_id "aMMj95S1y9eiNDrzXGdvRAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-09 20:46:12
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 16:46:04.076972 2025] [security2:error] [pid 2570:tid 2570] [client 2001:67c:6ec:203:192:42:116:185:45449] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||suswastima.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "suswastima.com"] [uri "/wordpress.sql"] [unique_id "aMCSDK2huNWFZiA3kccTlAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-09 07:59:59
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 03:59:52.878066 2025] [security2:error] [pid 3316:tid 3316] [client 2001:67c:6ec:203:192:42:116:185:11595] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||wisdomsco.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wisdomsco.com"] [uri "/wis.sql"] [unique_id "aL_eeIxDb7l9sffQNzHFBAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-07 01:18:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 21:18:20.042578 2025] [security2:error] [pid 1335507:tid 1335528] [client 2001:67c:6ec:203:192:42:116:185:60649] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.property-management-companies-chicago.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.property-management-companies-chicago.com"] [uri "/-companies-chicago.sql"] [unique_id "aLzdXLdS3T4yO-Q5ULepZwAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-07 00:42:44
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.no ...
show more
(mod_security) mod_security (id:210730) triggered by 2001:67c:6ec:203:192:42:116:185 (33.tor-exit.nothingtohide.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 20:42:41.474029 2025] [security2:error] [pid 20258:tid 20258] [client 2001:67c:6ec:203:192:42:116:185:22213] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||engravingbyangela.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "engravingbyangela.com"] [uri "/gela.sql"] [unique_id "aLzVAcNG84KMH66TmMKqcwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack