🇺🇸
TPI-Abuse
2025-05-03 15:47:03
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 11:46:56.013660 2025] [security2:error] [pid 1922910:tid 1922910] [client 2a0b:f4c2:2::45:5057] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||elpaco.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elpaco.net"] [uri "/bd.sql"] [unique_id "aBY6cPxJhmln8jvrxuW8zAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-08 20:02:54
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 16:02:46.715943 2025] [security2:error] [pid 1574:tid 1574] [client 2a0b:f4c2:2::45:53737] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hwh17.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hwh17.com"] [uri "/wp-content/db.sql"] [unique_id "Z_WA5layeTtrySxuKw9iFAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-06 22:43:49
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 06 18:43:45.687385 2025] [security2:error] [pid 370260:tid 370260] [client 2a0b:f4c2:2::45:8037] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.naturalhomebuilders.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.naturalhomebuilders.com"] [uri "/wp-content/database.sql"] [unique_id "Z_MDoTHom_owQJgT7u9epQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-28 21:26:51
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 28 17:26:44.384058 2025] [security2:error] [pid 13684:tid 13684] [client 2a0b:f4c2:2::45:36841] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ink2wear.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ink2wear.com"] [uri "/wp-config.backup"] [unique_id "Z-cUFC2zCHKgJxfRHxwpKAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-27 19:07:35
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 15:07:29.738073 2025] [security2:error] [pid 17610:tid 17610] [client 2a0b:f4c2:2::45:56357] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paulshorrock.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paulshorrock.com"] [uri "/wp-content/db.sql"] [unique_id "Z-Wh8Yq2GYOlReHLrgrcjAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-23 17:37:48
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 13:37:44.437027 2025] [security2:error] [pid 10368:tid 10368] [client 2a0b:f4c2:2::45:43743] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dogandponyband.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dogandponyband.com"] [uri "/database.sql"] [unique_id "Z-BG6HxcndDMrcFn6AYkRwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-12 18:50:57
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 12 14:50:50.309691 2025] [security2:error] [pid 7456:tid 7456] [client 2a0b:f4c2:2::45:31085] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||happymoosegifts.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "happymoosegifts.com"] [uri "/db.sql"] [unique_id "Z9HXinVh7PBE73jmomIFFAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-07 18:31:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 07 13:31:15.776355 2025] [security2:error] [pid 20283:tid 20283] [client 2a0b:f4c2:2::45:23289] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||indiahouseportland.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "indiahouseportland.com"] [uri "/installer-data.sql"] [unique_id "Z8s7cwmHpuQTejsmMaklAAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-04 12:03:12
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 07:03:04.635128 2025] [security2:error] [pid 23713:tid 23713] [client 2a0b:f4c2:2::45:42457] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bonesband.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bonesband.com"] [uri "/installer-data.sql"] [unique_id "Z8br-MBbaRtxFeuHMYc89AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-03 08:21:33
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 03:21:26.196513 2025] [security2:error] [pid 22086:tid 22086] [client 2a0b:f4c2:2::45:28569] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hawaiivacations.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hawaiivacations.com"] [uri "/installer-data.sql"] [unique_id "Z8Vmhj6shoPtR7wibQUCIAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-03 07:59:53
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 02:59:47.068183 2025] [security2:error] [pid 30993:tid 30993] [client 2a0b:f4c2:2::45:41369] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sandersonpropertyimprovements.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sandersonpropertyimprovements.com"] [uri "/installer-data.sql"] [unique_id "Z8Vhc3cd3T_9s85NwOupoQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2025-02-26 06:35:02
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2025-02-26 03:26:24
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 22:26:15.502588 2025] [security2:error] [pid 28484:tid 28484] [client 2a0b:f4c2:2::45:56913] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||drjasonkolber.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drjasonkolber.com"] [uri "/mysql.sql"] [unique_id "Z76J1xtc68F8QEHR7QOeJQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-25 21:38:25
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 25 16:38:21.100083 2025] [security2:error] [pid 8180:tid 8202] [client 2a0b:f4c2:2::45:63645] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vivierae.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vivierae.com"] [uri "/mysql.sql"] [unique_id "Z744TW8eheXA59IxcJQj8QAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-22 02:24:06
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 21 21:24:00.098891 2025] [security2:error] [pid 24952:tid 24952] [client 2a0b:f4c2:2::45:43861] [client 2a0b:f4c2:2::45] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||goodfrequencies.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "goodfrequencies.com"] [uri "/mysql.sql"] [unique_id "Z7k1QJhoIvWDgED23TyViwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
