πΊπΈ
TPI-Abuse
2025-11-04 00:34:25
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 19:34:18.963133 2025] [security2:error] [pid 13808:tid 13808] [client 2a03:2880:f806:14:::43026] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||leirstein.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "leirstein.com"] [uri "/leirstein.com"] [unique_id "aQlKCiuLQzXrwg2YG-F3YQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-10-27 18:23:26
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 14:23:23.290515 2025] [security2:error] [pid 3761:tid 3761] [client 2a03:2880:f806:14:::37456] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.achildsspace.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.achildsspace.com"] [uri "/instagram.com"] [unique_id "aP-4m7ZbjsswNl3vocoU_QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π΅π±
ketovoila.pl
2025-10-16 22:06:43
(11 months ago)
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=www.ketovoila.pl/; UA=meta-webindexer/1 ...
show more
ketovoila.pl HONEYPOT traffic: count=1, paths=1; sample_path=www.ketovoila.pl/; UA=meta-webindexer/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler); window=2025-10-16T05:26:28Z..2025-10-16T05:26:28Z
show less
Port Scan
Hacking
Brute-Force
Anonymous
2025-10-16 03:38:04
(11 months ago)
Excessive crawling/scraping
Hacking
Brute-Force
πΊπΈ
ipblock.com
2025-10-11 01:23:00
(1 year ago)
IPBlock protected site ID [955-wdo][s=11].
Persistent 404, vulnerability scanner
Hacking
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-10-07 00:12:03
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 20:11:59.831751 2025] [security2:error] [pid 18089:tid 18089] [client 2a03:2880:f806:14:::54654] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||Www.nancyscafeandcatering.com|F|2"] [data ".php-menu-=http3a2f2fwww.mercan.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/nav.php-Menu-=http3A2F2Fwww.mercan.com"] [unique_id "aORaz-1hMEctaMzXIMaPnQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨π
blinx
2025-09-28 17:21:19
(1 year ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-09-04 13:20:45
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:225170) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 09:20:39.744236 2025] [security2:error] [pid 19695:tid 19695] [client 2a03:2880:f806:14:::36720] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vangentholding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/51785"] [unique_id "aLmSJ3tlB2wM18l9yQHhxwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
london2038.com
2025-08-25 08:03:42
(1 year ago)
Too many failed requests
2a03:2880:f806:14:: - - [25/Aug/2025:09:43:09 +0200] "GET /uploads/default/ ...
show more
Too many failed requests
2a03:2880:f806:14:: - - [25/Aug/2025:09:43:09 +0200] "GET /uploads/default/original/1x/bb91390dd61f88dc0c30b6c31830896362157dde.jpeg HTTP/2.0" 404 146 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:14:: - - [25/Aug/2025:09:47:22 +0200] "GET /uploads/default/original/2x/f/f71261d7dc46980e3867da96f4a5e5bf7377486b.jpeg HTTP/2.0" 404 146 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:14:: - - [25/Aug/2025:09:47:25 +0200] "GET /uploads/default/original/1x/4bcb9f45941d8fe4c4019f4cfe8f63353fbb96e2.jpeg HTTP/2.0" 404 146 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2880:f806:14:: - - [25/Aug/2025:09:47:49 +0200] "GET /uploads/default/original/1x/033eb551bfcf66401337b16cb02662c8504e1280.jpg HTTP/2.0" 404 146 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
2a03:2
...
show less
Web Spam
Bad Web Bot
πΊπΈ
TPI-Abuse
2025-08-13 00:42:02
(1 year ago)
(mod_security) mod_security (id:213060) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:213060) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 12 20:41:57.845414 2025] [security2:error] [pid 13952:tid 13952] [client 2a03:2880:f806:14:::48158] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)((?:\\\\bx(?:link:href|html|mlns)|!ENTITY\\\\b.{0,399}?\\\\b(?:SYSTEM|PUBLIC)|\\\\bdata:text\\\\/html))" at ARGS:_bd_prev_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "170"] [id "213060"] [rev "7"] [msg "COMODO WAF: XSS Filter - Category 3: Attribute Vector||essentialee.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "essentialee.com"] [uri "/"] [unique_id "aJvfVVDBA6fpAO13Twm8HAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-08-12 10:44:17
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 12 06:44:13.007028 2025] [security2:error] [pid 6177:tid 6177] [client 2a03:2880:f806:14:::53016] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.alexgitlin.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.alexgitlin.com"] [uri "/npp/necromandus.htm/alexgitlin.com"] [unique_id "aJsa_Yj0EsU6CHO56A417gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Roderic
2025-08-05 02:18:25
(1 year ago)
(PERMBLOCK) 2a03:2880:f806:14:: (US/United States/Georgia/Alpharetta/-/[redacted]) has had more than ...
show more
(PERMBLOCK) 2a03:2880:f806:14:: (US/United States/Georgia/Alpharetta/-/[redacted]) has had more than 4 temp blocks
show less
Hacking
π³π±
Roderic
2025-08-04 17:51:07
(1 year ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
πΊπΈ
TPI-Abuse
2025-07-29 12:03:26
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 08:03:18.793629 2025] [security2:error] [pid 24503:tid 24503] [client 2a03:2880:f806:14:::60366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.flavornet.org|F|2"] [data ".pdb"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.flavornet.org"] [uri "/info/jmol/pdb/99-83-2.pdb"] [unique_id "aIi4huV65yXXc36MYLPlmQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2025-07-29 10:30:46
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 2a03:2880:f806:14:: (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 29 06:30:43.078291 2025] [security2:error] [pid 10325:tid 10325] [client 2a03:2880:f806:14:::54212] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.chrisbilder.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chrisbilder.com"] [uri "/regression/chapters/SO2.DAT"] [unique_id "aIii08aSqF5AOXHjXgWW5AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack