🇺🇸
TPI-Abuse
2025-12-10 07:55:24
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 02:55:19.317548 2025] [security2:error] [pid 8412:tid 8412] [client 2a0b:f4c2:2::45:63247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stoughtonpipeandwelding.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stoughtonpipeandwelding.net"] [uri "/ing_com.sql"] [unique_id "aTknZw3PMEMFqgA8rWraIgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 12:38:35
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 07:38:30.559971 2025] [security2:error] [pid 17056:tid 17056] [client 2a0b:f4c2:2::45:12135] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||buildyourownpublishing.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "buildyourownpublishing.com"] [uri "/bu.sql"] [unique_id "aTgYRhV-uowBDxgcTqa6hwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-09 10:09:54
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 05:09:46.863406 2025] [security2:error] [pid 10586:tid 10586] [client 2a0b:f4c2:2::45:64523] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||reyadecostarica.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "reyadecostarica.com"] [uri "/reyadecostar.sql"] [unique_id "aTf1ap4vu9JRoUAkTvFJWQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 19:18:25
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 14:18:19.664045 2025] [security2:error] [pid 14814:tid 14814] [client 2a0b:f4c2:2::45:52931] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||maprada92.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "maprada92.com"] [uri "/daily.sql"] [unique_id "aTckewWJ9gArbVaPx_B8VQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 18:18:44
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 13:18:41.477515 2025] [security2:error] [pid 29426:tid 29426] [client 2a0b:f4c2:2::45:45703] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||shannonraevocalstudio.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "shannonraevocalstudio.com"] [uri "/shannonra.sql"] [unique_id "aTcWgVZkJma9TjKEetfxIQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 10:40:34
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 05:40:25.846003 2025] [security2:error] [pid 5099:tid 5099] [client 2a0b:f4c2:2::45:60393] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||salernospizza.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "salernospizza.com"] [uri "/ernospizza_com.sql"] [unique_id "aTarGYWOhg7WSlLN-4KMqQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 05:53:39
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 00:53:36.395533 2025] [security2:error] [pid 21095:tid 21095] [client 2a0b:f4c2:2::45:58929] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dalessalesandservice.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dalessalesandservice.com"] [uri "/sandservice_com.sql"] [unique_id "aTZn4N8VXHitXlBMZi_naAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 01:01:28
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:01:24.709380 2025] [security2:error] [pid 2528:tid 2528] [client 2a0b:f4c2:2::45:19759] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||michelehoop.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michelehoop.com"] [uri "/michelehoo.sql"] [unique_id "aTYjZKrikQDxT1DRNmp_EQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 16:53:26
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 11:53:21.630340 2025] [security2:error] [pid 15875:tid 15903] [client 2a0b:f4c2:2::45:53199] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dontbeajerklikeyourwork.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dontbeajerklikeyourwork.com"] [uri "/backupwp.sql"] [unique_id "aTRfgfcSVW1M7Sc2D5DKsgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 15:44:05
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 10:43:56.258765 2025] [security2:error] [pid 32069:tid 32069] [client 2a0b:f4c2:2::45:7507] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||epetsure.co|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "epetsure.co"] [uri "/epet.sql"] [unique_id "aTL9vDDPfGAapnquibV60wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 19:47:25
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 14:47:17.352604 2025] [security2:error] [pid 26324:tid 26324] [client 2a0b:f4c2:2::45:21565] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||activethinkers.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "activethinkers.net"] [uri "/kers_com.sql"] [unique_id "aTHlRUoq8IHyBgcJphRxMgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2025-11-30 12:55:09
(9 months ago)
Blocked by UFW (TCP on 40456)
Source port: 49893
Packet length: 80
This report (for 2a0b:f4c2:0002: ...
show more
Blocked by UFW (TCP on 40456)
Source port: 49893
Packet length: 80
This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0045) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2025-11-26 22:12:32
(9 months ago)
Blocked by UFW (TCP on 61496)
Source port: 13185
Packet length: 80
This report (for 2a0b:f4c2:0002: ...
show more
Blocked by UFW (TCP on 61496)
Source port: 13185
Packet length: 80
This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0045) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2025-11-17 13:05:07
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 17 08:05:02.480396 2025] [security2:error] [pid 23700:tid 23700] [client 2a0b:f4c2:2::45:2201] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jannetta.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jannetta.com"] [uri "/.sql"] [unique_id "aRsdfkk68WBqAeOnL0Lr9wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-15 04:58:34
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::45 (tor-exit-45.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 23:58:26.501183 2025] [security2:error] [pid 30599:tid 30599] [client 2a0b:f4c2:2::45:36087] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||misogynyis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "misogynyis.com"] [uri "/sogynyis.sql"] [unique_id "aRgIcq8GsgHCuogeN8qcQgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
