🇺🇸
TPI-Abuse
2025-12-11 11:29:11
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 06:29:08.180386 2025] [security2:error] [pid 14587:tid 14587] [client 2a0b:f4c2:2::57:57521] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||riccardiagency.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "riccardiagency.com"] [uri "/riccardiagency_com.sql"] [unique_id "aTqrBHl08P2CJUpMFjrMpgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 09:41:26
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 11 04:41:18.904045 2025] [security2:error] [pid 1724:tid 1724] [client 2a0b:f4c2:2::57:61193] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||morninginc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "morninginc.com"] [uri "/mo.sql"] [unique_id "aTqRvkKHQvwn4giU-DPG6QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-11 01:09:09
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 20:08:56.921369 2025] [security2:error] [pid 26939:tid 26939] [client 2a0b:f4c2:2::57:62593] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tgdingenieria.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tgdingenieria.com"] [uri "/back.sql"] [unique_id "aToZqN7YjrR47pr8NxaNswAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2025-12-10 19:20:31
(8 months ago)
Blocked by UFW (TCP on 11110)
Source port: 10817
Packet length: 80
This report (for 2a0b:f4c2:0002: ...
show more
Blocked by UFW (TCP on 11110)
Source port: 10817
Packet length: 80
This report (for 2a0b:f4c2:0002:0000:0000:0000:0000:0057) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇺🇸
TPI-Abuse
2025-12-09 11:43:18
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 06:43:12.764300 2025] [security2:error] [pid 21692:tid 21692] [client 2a0b:f4c2:2::57:64119] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||travelwithjenniferb.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "travelwithjenniferb.com"] [uri "/trave.sql"] [unique_id "aTgLUBV6RsWB-6JQwwBgKwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 17:53:16
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 12:53:07.271553 2025] [security2:error] [pid 24696:tid 24770] [client 2a0b:f4c2:2::57:59147] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||clearwaterpumpservices.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "clearwaterpumpservices.com"] [uri "/learwaterpumpservices_com.sql"] [unique_id "aTcQg7qEyzOhKpKEKuleHAAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-08 07:50:06
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 02:49:58.359375 2025] [security2:error] [pid 4317:tid 4317] [client 2a0b:f4c2:2::57:8369] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lukeschicago.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lukeschicago.com"] [uri "/backupwp.sql"] [unique_id "aTaDJo7ioFRGcXPJ3TEvAwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-07 11:02:19
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 06:02:13.572785 2025] [security2:error] [pid 1663:tid 1676] [client 2a0b:f4c2:2::57:57123] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||property-management-companies-chicago.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "property-management-companies-chicago.com"] [uri "/backup_wp.sql"] [unique_id "aTVetUO7PdWm0mMqNoJhGwAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 08:22:17
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 03:22:14.154818 2025] [security2:error] [pid 14701:tid 14701] [client 2a0b:f4c2:2::57:32991] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||plazahacienda.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "plazahacienda.com"] [uri "/plazahaciend.sql"] [unique_id "aTPntiIZ4Fwon1HFrCtjuwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-06 02:35:36
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 21:35:30.989150 2025] [security2:error] [pid 27181:tid 27181] [client 2a0b:f4c2:2::57:31699] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jimrichardart.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jimrichardart.com"] [uri "/jimricha.sql"] [unique_id "aTOWcs-NREYt8ZRCpooIgwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 22:53:06
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 17:52:59.890541 2025] [security2:error] [pid 32041:tid 32041] [client 2a0b:f4c2:2::57:3185] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||rodeeinsurance.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rodeeinsurance.com"] [uri "/rod.sql"] [unique_id "aTNiS5EhvjfJzun6G32LPgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-05 09:58:04
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 04:57:55.419439 2025] [security2:error] [pid 16414:tid 16414] [client 2a0b:f4c2:2::57:38167] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||georgesmarina.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "georgesmarina.com"] [uri "/esmarina_com.sql"] [unique_id "aTKso5r0QPWX0QkEBSAyVwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-04 16:17:53
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 11:17:38.240565 2025] [security2:error] [pid 25288:tid 25288] [client 2a0b:f4c2:2::57:27691] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||michaelmoorefield.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelmoorefield.com"] [uri "/mi.sql"] [unique_id "aTG0IlDjWkJymRK3cJ6nQQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-29 23:54:30
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 29 18:54:26.773272 2025] [security2:error] [pid 5216:tid 5216] [client 2a0b:f4c2:2::57:38781] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||doreenkimura.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "doreenkimura.com"] [uri "/backups.sql"] [unique_id "aSuHsi4Jb4E4Wfq2xaRAYwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-27 10:13:36
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::57 (tor-exit-57.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 05:13:29.350807 2025] [security2:error] [pid 16148:tid 16148] [client 2a0b:f4c2:2::57:30339] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thewhispertwins.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thewhispertwins.com"] [uri "/th.sql"] [unique_id "aSgkSWl6f9RQMCtjvtNsagAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
