🇺🇸
TPI-Abuse
2025-09-14 01:24:20
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 21:24:12.514520 2025] [security2:error] [pid 10357:tid 10357] [client 2a07:e03:2a::bcde:44468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thorndikestudio.com"] [uri "/wp-config.php.zip"] [unique_id "aMYZPPoApFms2LBydiRDYAAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-07 01:07:11
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 21:07:02.938421 2025] [security2:error] [pid 26911:tid 26911] [client 2a07:e03:2a::bcde:41424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mikedeutsch.com"] [uri "/wp-config.php.zip"] [unique_id "aLzatmZXg9y1ird5OffwOQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-05 10:02:20
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 05 06:02:13.964040 2025] [security2:error] [pid 24620:tid 24620] [client 2a07:e03:2a::bcde:53764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bolivarbulletintimes.com"] [uri "/wp-config.php.zip"] [unique_id "aLq1JZ00HJlgWEHbPKffNwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
CommanderRoot
2025-08-01 13:51:03
(11 months ago)
AI Bot crawler
DDoS Attack
Web Spam
🇩🇪
Mr-Money
2025-07-31 19:50:58
(11 months ago)
2a07:e03:2a::bcde - - [31/Jul/2025:21:50:57 +0200] "GET /n-dwb.zip HTTP/1.1" 404 417 "-" "Mozilla/4. ...
show more
2a07:e03:2a::bcde - - [31/Jul/2025:21:50:57 +0200] "GET /n-dwb.zip HTTP/1.1" 404 417 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3)"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-07-28 23:57:17
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 19:57:11.178831 2025] [security2:error] [pid 5398:tid 5398] [client 2a07:e03:2a::bcde:41432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.globalmonitoringinc.com"] [uri "/.git/config"] [unique_id "aIgOVwGNmicmLeYCyLykcAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-28 10:28:50
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 06:28:45.101863 2025] [security2:error] [pid 4186:tid 4200] [client 2a07:e03:2a::bcde:40108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.websitehomepages.com"] [uri "/.git/config"] [unique_id "aIdQ3VAIq0QiY8-6sC4PVgAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-27 10:47:22
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210492) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 27 06:47:13.686283 2025] [security2:error] [pid 25708:tid 25708] [client 2a07:e03:2a::bcde:47766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.b-radsautodetailing.com"] [uri "/.git/config"] [unique_id "aIYDsWivKuT8NJpPO14dGAAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-03 17:10:16
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 13:10:09.466612 2025] [security2:error] [pid 3416199:tid 3416199] [client 2a07:e03:2a::bcde:60192] [client 2a07:e03:2a::bcde] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||innovacionesnimba.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "innovacionesnimba.com"] [uri "/adminer.sql"] [unique_id "aBZN8Xks5VFTZvUB3IQwKQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-24 08:26:52
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 04:26:43.763843 2025] [security2:error] [pid 1789235:tid 1789235] [client 2a07:e03:2a::bcde:50740] [client 2a07:e03:2a::bcde] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||damgoodit.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "damgoodit.com"] [uri "/wwwroot.sql"] [unique_id "aAn1w_QUHbktQcldQyM7OQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-18 11:31:53
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 18 07:31:44.784175 2025] [security2:error] [pid 15211:tid 15211] [client 2a07:e03:2a::bcde:45206] [client 2a07:e03:2a::bcde] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||clinegroup.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "clinegroup.net"] [uri "/database.sql"] [unique_id "aAI4IAk-vLLGhWMtSBqfTAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-10 06:42:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 10 02:41:58.491730 2025] [security2:error] [pid 3565:tid 3565] [client 2a07:e03:2a::bcde:45194] [client 2a07:e03:2a::bcde] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bluemarineboats.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluemarineboats.com"] [uri "/db.sql"] [unique_id "Z_doNpRZs3sucRJgu-z9vwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-08 18:58:02
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 14:57:53.222924 2025] [security2:error] [pid 10481:tid 10481] [client 2a07:e03:2a::bcde:55874] [client 2a07:e03:2a::bcde] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||theopinionatedowl.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "theopinionatedowl.com"] [uri "/wp-content/db.sql"] [unique_id "Z_VxsXHrw21o_-BoiNDYdQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-23 13:20:51
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 09:20:45.997198 2025] [security2:error] [pid 5695:tid 5695] [client 2a07:e03:2a::bcde:60514] [client 2a07:e03:2a::bcde] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||evolute.io|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "evolute.io"] [uri "/wp-content/database.sql"] [unique_id "Z-AKrdnP1AkzWEf0mzWWUwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-28 22:10:19
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 i ...
show more
(mod_security) mod_security (id:210730) triggered by 2a07:e03:2a::bcde (tor-exit-nl1.privex.cc): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 28 17:10:12.901361 2025] [security2:error] [pid 13894:tid 13913] [client 2a07:e03:2a::bcde:56518] [client 2a07:e03:2a::bcde] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||amazinglips.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amazinglips.com"] [uri "/installer-data.sql"] [unique_id "Z8I0RKYB9cldA0Fl08lsZgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack