🇺🇸
TPI-Abuse
2025-11-06 01:27:59
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 20:27:55.974842 2025] [security2:error] [pid 32576:tid 32576] [client 2a0b:f4c2::12:60012] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||investorscalifornia.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "investorscalifornia.com"] [uri "/daily.sql"] [unique_id "aQv5myIKkdjCyASjhfDUAAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-04 15:31:00
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 04 10:30:56.425518 2025] [security2:error] [pid 5776:tid 5776] [client 2a0b:f4c2::12:40416] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alaskadreamspublishing.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alaskadreamspublishing.com"] [uri "/hing.sql"] [unique_id "aQocMJ-67ySd6pziejt5UAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-03 01:43:49
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 02 20:43:41.392881 2025] [security2:error] [pid 31542:tid 31542] [client 2a0b:f4c2::12:23722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||pschitchat.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pschitchat.com"] [uri "/psc.sql"] [unique_id "aQgIzfeGJEt4RJAW_Rj65QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2025-10-31 01:35:15
(11 months ago)
(db_admin_scan) srv103 DB admin scan 2a0b:f4c2::12 (Unknown): 1 in the last 3600 secs; Ports: *; Dir ...
show more
(db_admin_scan) srv103 DB admin scan 2a0b:f4c2::12 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
xmission.com
2025-10-29 18:54:57
(11 months ago)
Blocked by UFW (TCP on 8333)
Source port: 46794
Packet length: 80
This report (for 2a0b:f4c2:0000:0 ...
show more
Blocked by UFW (TCP on 8333)
Source port: 46794
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0012) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇳🇱
SysAdmin Dylan
2025-10-27 21:22:10
(11 months ago)
(directadmin) Failed DirectAdmin phpMyAdmin login from 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.or ...
show more
(directadmin) Failed DirectAdmin phpMyAdmin login from 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DIRECTADMIN; Logs: Oct 27 22:21:43 user denied: wordpress (mysql-denied) from 2a0b:f4c2::12
show less
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2025-10-27 00:57:01
(11 months ago)
(modsecurity) srv101 ModSecurity 2a0b:f4c2::12 (Unknown): 5 in the last 3600 secs; Ports: *; Directi ...
show more
(modsecurity) srv101 ModSecurity 2a0b:f4c2::12 (Unknown): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-10-25 19:16:59
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 25 15:16:51.226192 2025] [security2:error] [pid 4939:tid 4939] [client 2a0b:f4c2::12:42808] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.televisonic.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.televisonic.com"] [uri "/visonic.sql"] [unique_id "aP0iI7aDow__VQ1fxDSbCAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 04:48:48
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 00:48:42.623234 2025] [security2:error] [pid 23906:tid 23906] [client 2a0b:f4c2::12:31262] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||caddydad.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caddydad.com"] [uri "/dydad.sql"] [unique_id "aPmzqinCuCTMKOne53Q3fAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-20 23:38:44
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 20 19:38:39.138860 2025] [security2:error] [pid 23807:tid 23807] [client 2a0b:f4c2::12:16120] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zacharypowers.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zacharypowers.com"] [uri "/wp-config.backup"] [unique_id "aPbH__Fsy65BRlV_do_oKwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-17 23:09:50
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:225170) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 17 19:09:42.428657 2025] [security2:error] [pid 20590:tid 20590] [client 2a0b:f4c2::12:62718] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fatbastardcompetition.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fatbastardcompetition.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aPLMtl5MX5Wlf_Uuwz7VVgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-17 13:39:41
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 17 09:39:37.418400 2025] [security2:error] [pid 31310:tid 31310] [client 2a0b:f4c2::12:32086] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||lightbender.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lightbender.net"] [uri "/ender.sql"] [unique_id "aPJHGf5h7jj4dwGBR1GOdgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-12 04:55:41
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 00:55:38.997458 2025] [security2:error] [pid 4552:tid 4552] [client 2a0b:f4c2::12:55670] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||themadwriter.us|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "themadwriter.us"] [uri "/them.sql"] [unique_id "aOs0yh0eYEZUgxuDz4LdCwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-11 11:36:46
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 11 07:36:39.343960 2025] [security2:error] [pid 1226:tid 1226] [client 2a0b:f4c2::12:16740] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||arapi.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "arapi.org"] [uri "/arapi.sql"] [unique_id "aOpBRxnLd29dxczBBT7mcwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-06 10:13:07
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::12 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 06:13:00.209591 2025] [security2:error] [pid 22208:tid 22208] [client 2a0b:f4c2::12:12420] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||bikinitweets.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bikinitweets.com"] [uri "/biki.sql"] [unique_id "aOOWLCYfqB4IfnkqSk-VSgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
