🇺🇸
TPI-Abuse
2025-12-10 03:57:58
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 22:57:53.997408 2025] [security2:error] [pid 12365:tid 12365] [client 2a00:1b88:4::2:50954] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||egelfitness.nl|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "egelfitness.nl"] [uri "/egelf.sql"] [unique_id "aTjvwZLxPwRLa9ZBNsHjSwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 22:02:25
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 17:02:21.361765 2025] [security2:error] [pid 8607:tid 8607] [client 2a00:1b88:4::2:39142] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sumilondon.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sumilondon.com"] [uri "/sumil.sql"] [unique_id "aTicbV-QLy_-PzyHLhh8YwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 16:38:58
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 11:38:51.541002 2025] [security2:error] [pid 18452:tid 18452] [client 2a00:1b88:4::2:39234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||handymaneats.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "handymaneats.com"] [uri "/wordpress.sql"] [unique_id "aThQm0GWzE_WEfszLUZBiwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 15:40:35
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 10:40:31.308123 2025] [security2:error] [pid 467:tid 467] [client 2a00:1b88:4::2:60186] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||elgatocapa.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elgatocapa.com"] [uri "/el.sql"] [unique_id "aThC7xlCpUbpHS8kUE0IMgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 05:14:45
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 00:14:38.200529 2025] [security2:error] [pid 18794:tid 18794] [client 2a00:1b88:4::2:39836] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lilpiggiescardgame.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lilpiggiescardgame.com"] [uri "/game_com.sql"] [unique_id "aTewPoNbW479Xs1h19P6cgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
PTnet
2025-12-09 01:05:14
(9 months ago)
DDoS Attack (jail:haproxy-https-flood)
DDoS Attack
Exploited Host
🇵🇹
PTnet
2025-12-09 01:05:13
(9 months ago)
DDoS Attack (jail:haproxy-https-flood)
DDoS Attack
Exploited Host
🇺🇸
TPI-Abuse
2025-12-09 00:49:32
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 19:49:25.086775 2025] [security2:error] [pid 20590:tid 20590] [client 2a00:1b88:4::2:45724] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||theopinionatedowl.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "theopinionatedowl.com"] [uri "/latest.sql"] [unique_id "aTdyFbXII4JhjfXJghIJqwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 03:57:07
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 22:57:03.739885 2025] [security2:error] [pid 16292:tid 16292] [client 2a00:1b88:4::2:47208] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||laura-stone.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "laura-stone.com"] [uri "/one_com.sql"] [unique_id "aTZMj7kVCQxnGaimYKIwJwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 01:06:40
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:06:34.622974 2025] [security2:error] [pid 30580:tid 30580] [client 2a00:1b88:4::2:33716] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||losbarbarosdelnorte.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "losbarbarosdelnorte.com"] [uri "/losbarbarosdelnor.sql"] [unique_id "aTYkmtXFrv_mHQkQLzbOZAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2025-12-07 16:48:37
(9 months ago)
2025-12-07 @ 17:48:37 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 06:31:12
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 01:31:05.735420 2025] [security2:error] [pid 504:tid 504] [client 2a00:1b88:4::2:44340] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||glaswoodind.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "glaswoodind.com"] [uri "/glaswoo.sql"] [unique_id "aTUfKQ2e-j8bkiHWlUuneQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 03:32:15
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 22:32:10.986331 2025] [security2:error] [pid 21856:tid 21856] [client 2a00:1b88:4::2:50068] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||kontikimotorcycles.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kontikimotorcycles.com"] [uri "/orcycles_com.sql"] [unique_id "aTT1OnHPAy-LRg0j8PI72AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 23:56:07
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 18:55:59.346096 2025] [security2:error] [pid 31051:tid 31051] [client 2a00:1b88:4::2:54024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mccompu.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mccompu.com"] [uri "/mccom.sql"] [unique_id "aTTCj9hyyw-1OMkT6ISt2AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 20:42:06
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 2a00:1b88:4::2 (marcuse.nos-oignons.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 15:41:57.603991 2025] [security2:error] [pid 26300:tid 26300] [client 2a00:1b88:4::2:58202] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grapplerunion.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grapplerunion.com"] [uri "/grapplerunion_com.sql"] [unique_id "aTSVFdz3-5y53yIISjtUYgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
