🇺🇸
TPI-Abuse
2025-09-07 08:57:43
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 07 04:57:36.187040 2025] [security2:error] [pid 2959726:tid 2959751] [client 2a0b:f4c2::10:32502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pref-realestate.com"] [uri "/wp-config.php.zip"] [unique_id "aL1JAKxNdY7GURPvIDtuJwAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 15:40:59
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 11:40:53.003097 2025] [security2:error] [pid 26331:tid 26331] [client 2a0b:f4c2::10:58676] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jacquelineperriam.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jacquelineperriam.com"] [uri "/elineperriam.sql"] [unique_id "aLxWBCNKw3c6SdFn4vynTwAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 09:40:10
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 05:40:03.474817 2025] [security2:error] [pid 28211:tid 28211] [client 2a0b:f4c2::10:29740] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.threewild.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.threewild.com"] [uri "/.sql"] [unique_id "aLwBc_zHFBsMhNaVv0yCWAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-03 22:14:21
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 03 18:14:18.400833 2025] [security2:error] [pid 17829:tid 17829] [client 2a0b:f4c2::10:25854] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aboutagingparents.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aboutagingparents.com"] [uri "/nts_new.sql"] [unique_id "aLi9umy1gf3-xHqa_NGBHAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-03 02:57:52
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 02 22:57:47.297252 2025] [security2:error] [pid 24500:tid 24500] [client 2a0b:f4c2::10:52156] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||integrabroadcast.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "integrabroadcast.com"] [uri "/wp.sql"] [unique_id "aLeuq_XFjgBLq9pNH7_d8AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
maza
2025-09-03 02:19:14
(1 year ago)
Malicious activity detected from 60729 TORSERVERS-NET towards host alterminds.xyz (GET HTTP/1.1) @ ...
show more
Malicious activity detected from 60729 TORSERVERS-NET towards host alterminds.xyz (GET HTTP/1.1) @ 2025-09-03T02:19:14Z
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-09-01 09:45:52
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 01 05:45:41.225861 2025] [security2:error] [pid 8337:tid 8337] [client 2a0b:f4c2::10:54790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fuentevictoria.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fuentevictoria.com"] [uri "/wp.sql"] [unique_id "aLVrRW5wtjkN1_JanGf3PQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-30 18:26:34
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 14:26:29.115352 2025] [security2:error] [pid 7409:tid 7409] [client 2a0b:f4c2::10:7080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danialias.com"] [uri "/news/wp-config.php.zip"] [unique_id "aLNCVWrgsRtpVyQenA7gzgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-30 16:20:56
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 12:20:49.712621 2025] [security2:error] [pid 461:tid 461] [client 2a0b:f4c2::10:54990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campnecon.com"] [uri "/wp-config.php.zip"] [unique_id "aLMk4QCRfU3Cxc07Uh_O6wAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-29 08:33:38
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 29 04:33:34.408102 2025] [security2:error] [pid 29167:tid 29167] [client 2a0b:f4c2::10:26086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gjbenches.com"] [uri "/wp-config.php~.zip"] [unique_id "aLFl3uwxdOK_1AekfK0pJAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-24 04:30:49
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇳🇱
Mangelot Hosting
2025-08-23 00:10:56
(1 year ago)
(modsecurity) srv102 ModSecurity 2a0b:f4c2::10 (Unknown): 5 in the last 3600 secs; Ports: *; Directi ...
show more
(modsecurity) srv102 ModSecurity 2a0b:f4c2::10 (Unknown): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
LRob
2025-08-20 08:15:15
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇺🇸
TPI-Abuse
2025-08-17 15:30:51
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 17 11:30:45.541170 2025] [security2:error] [pid 1402:tid 1402] [client 2a0b:f4c2::10:41338] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||onlinedigitalsuperstore.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "onlinedigitalsuperstore.com"] [uri "/backups.sql"] [unique_id "aKH1pRishHe-cejcSuOvFgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-25 17:06:26
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::10 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 25 13:06:20.555655 2025] [security2:error] [pid 400791:tid 400791] [client 2a0b:f4c2::10:26770] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fatcavestudios.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fatcavestudios.com"] [uri "/bd.sql"] [unique_id "aFwsjMt_1X8Xz8NO4Di5cAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
