🇺🇸
xmission.com
2025-07-19 17:01:36
(1 year ago)
Blocked by UFW (TCP on 61496)
Source port: 6743
Packet length: 80
This report (for 2a0b:f4c2:0002:0 ...
show more
Blocked by UFW (TCP on 61496)
Source port: 6743
Packet length: 80
This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0057) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2025-07-13 06:23:30
(1 year ago)
Blocked by UFW (TCP on 22360)
Source port: 54739
Packet length: 80
This report (for 2a0b:f4c2:0002: ...
show more
Blocked by UFW (TCP on 22360)
Source port: 54739
Packet length: 80
This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0057) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
xmission.com
2025-07-12 02:29:07
(1 year ago)
Blocked by UFW (TCP on 41638)
Source port: 15833
Packet length: 80
This report (for 2a0b:f4c2:0002: ...
show more
Blocked by UFW (TCP on 41638)
Source port: 15833
Packet length: 80
This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0057) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇦🇺
afleventoffice.com.au
2025-05-28 04:18:04
(1 year ago)
GET /shop/wp-login.php HTTP/1.1
Web App Attack
🇺🇸
TPI-Abuse
2025-05-19 04:53:31
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 19 00:53:27.157212 2025] [security2:error] [pid 3163979:tid 3164008] [client 2a0b:f4c2:2::57:44053] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeanpaullederer.com"] [uri "/wp-config.old.old"] [unique_id "aCq5Rz2IxxYfxvGVyb10FgAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-10 00:56:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 20:56:20.054174 2025] [security2:error] [pid 3306339:tid 3306339] [client 2a0b:f4c2:2::57:16771] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||messengersforchrist.charity|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "messengersforchrist.charity"] [uri "/bd.sql"] [unique_id "aB6kNIo7yGLtzwdlbILEsAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-09 19:41:09
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 15:41:04.743353 2025] [security2:error] [pid 1145326:tid 1145338] [client 2a0b:f4c2:2::57:31635] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||davidholls.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "davidholls.com"] [uri "/bd.sql"] [unique_id "aB5aUHfTysfTODGJ7nGtQwAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-09 08:47:07
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 04:47:04.035582 2025] [security2:error] [pid 1466790:tid 1466790] [client 2a0b:f4c2:2::57:3973] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||t9teamsportinggoods.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "t9teamsportinggoods.com"] [uri "/adminer.sql"] [unique_id "aB3BCHNEpv1DcphYdtba9QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-05 16:07:15
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 12:07:10.980750 2025] [security2:error] [pid 1551819:tid 1551819] [client 2a0b:f4c2:2::57:1385] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sebog.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sebog.org"] [uri "/migration.sql"] [unique_id "aBjiLiMnD8Ylt5TRFerUYwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-04 01:24:14
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 21:24:04.847773 2025] [security2:error] [pid 3679979:tid 3679979] [client 2a0b:f4c2:2::57:53231] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||greatchristianadventure.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "greatchristianadventure.com"] [uri "/adminer.sql"] [unique_id "aBbBtIrpnxikpduhS9fh3wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-26 04:32:06
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 26 00:32:02.384545 2025] [security2:error] [pid 19914:tid 19914] [client 2a0b:f4c2:2::57:63521] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tlc-computing.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tlc-computing.com"] [uri "/migration.sql"] [unique_id "aAxhwhi0SyAuazhkQ4JFQgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-24 13:51:21
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 09:51:16.222498 2025] [security2:error] [pid 26466:tid 26466] [client 2a0b:f4c2:2::57:3587] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vanmeer.info|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vanmeer.info"] [uri "/administrator/backups/database-sql.sql"] [unique_id "aApB1LGTCBU3mxfyNt89kwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2025-04-15 06:20:53
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-04-02 20:59:09
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 16:59:05.777026 2025] [security2:error] [pid 20857:tid 20857] [client 2a0b:f4c2:2::57:12191] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portlunchgroup.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portlunchgroup.com"] [uri "/db.sql"] [unique_id "Z-2lGbS6lx0oDz6fUPNyGgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-02 18:19:16
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 14:19:10.786773 2025] [security2:error] [pid 22778:tid 22778] [client 2a0b:f4c2:2::57:5677] [client 2a0b:f4c2:2::57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||janyoors.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "janyoors.com"] [uri "/db.sql"] [unique_id "Z-1_nqbFv7g8wQSkAV_zzAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
