2026-04-26 21:01:57
(5 months ago)
2026-04-26 08:00:26,692 fail2ban.actions [7718]: NOTICE [tor] Ban 2400:8901::f03c:95ff:fe89: ...
show more
2026-04-26 08:00:26,692 fail2ban.actions [7718]: NOTICE [tor] Ban 2400:8901::f03c:95ff:fe89:4a88
2026-04-26 12:01:25,152 fail2ban.actions [7718]: NOTICE [tor] Ban 2400:8901::f03c:95ff:fe89:4a88
2026-04-26 18:01:22,941 fail2ban.actions [7718]: NOTICE [tor] Ban 2400:8901::f03c:95ff:fe89:4a88
2026-04-26 21:01:19,966 fail2ban.actions [7718]: NOTICE [tor] Ban 2400:8901::f03c:95ff:fe89:4a88
2026-04-27 00:01:56,508 fail2ban.actions [7718]: NOTICE [tor] Ban 2400:8901::f03c:95ff:fe89:4a88
show less
Brute-Force
🇩🇪
HandyTreff.de
2026-03-27 14:09:42
(6 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -43.101 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -43.101 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.10
show less
Web App Attack
Bad Web Bot
🇮🇹
VHosting
2026-03-26 21:15:23
(6 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-07 12:33:55
(7 months ago)
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (tor-exit.sg.loc ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (tor-exit.sg.localenby.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 07:33:48.832881 2026] [security2:error] [pid 16770:tid 16770] [client 2400:8901::f03c:95ff:fe89:4a88:49556] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||braunhausmedia.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "braunhausmedia.com"] [uri "/master.sql"] [unique_id "aYcxLINrJpApU_Y7C-dKQwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-13 23:21:33
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (tor-exit.sg.loc ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (tor-exit.sg.localenby.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 18:21:28.064276 2026] [security2:error] [pid 15281:tid 15281] [client 2400:8901::f03c:95ff:fe89:4a88:54382] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bonvivantorganics.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bonvivantorganics.com"] [uri "/bonvivanto.sql"] [unique_id "aWbTeFXNsbQyaOB7V6DldwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-12 20:52:55
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (tor-exit.sg.lin ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (tor-exit.sg.linuxenby.is): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 12 15:52:47.085083 2025] [security2:error] [pid 579:tid 579] [client 2400:8901::f03c:95ff:fe89:4a88:59402] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.avaliantlife.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.avaliantlife.com"] [uri "/bck.sql"] [unique_id "aRTzn66u-GLgUhFGH_cSFAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 12:19:50
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 08:19:42.372472 2025] [security2:error] [pid 23738:tid 23754] [client 2400:8901::f03c:95ff:fe89:4a88:48508] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.guitarprimer.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.guitarprimer.com"] [uri "/rprimer.sql"] [unique_id "aNE-3i3lLPe23TTO5vuTHAAAAI4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-12 12:19:13
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 12 08:19:07.013351 2025] [security2:error] [pid 2853536:tid 2853536] [client 2400:8901::f03c:95ff:fe89:4a88:51982] [client 2400:8901::f03c:95ff:fe89:4a88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunshine-trust.com"] [uri "/wp-config.old.old"] [unique_id "aCHnO-_cx_oG0GpF23m8cgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-06 16:32:06
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 12:31:58.649698 2025] [security2:error] [pid 1814932:tid 1814939] [client 2400:8901::f03c:95ff:fe89:4a88:42736] [client 2400:8901::f03c:95ff:fe89:4a88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||busybeerestaurant.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "busybeerestaurant.com"] [uri "/bd.sql"] [unique_id "aBo5fh5Eqpa1k3aBYcRVuwAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-18 05:32:36
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2400:8901::f03c:95ff:fe89:4a88 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 01:32:32.330817 2025] [security2:error] [pid 14547:tid 14547] [client 2400:8901::f03c:95ff:fe89:4a88:39660] [client 2400:8901::f03c:95ff:fe89:4a88] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||churchbehindthewalls.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "churchbehindthewalls.com"] [uri "/administrator/backups/database-sql.sql"] [unique_id "aAHj8GBzO13zEoMgi5V8OQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack