🇺🇸
TPI-Abuse
2025-08-29 13:48:17
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 29 09:48:12.098916 2025] [security2:error] [pid 23161:tid 23161] [client 2a0b:f4c2::13:56564] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.genevainvestors.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.genevainvestors.com"] [uri "/genevainv.sql"] [unique_id "aLGvnEK-4DkyvuJDkD8ORAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-08-28 23:19:26
(1 year ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2025-08-26 10:44:24
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 06:44:16.506552 2025] [security2:error] [pid 3129:tid 3129] [client 2a0b:f4c2::13:11660] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||abcollie.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "abcollie.com"] [uri "/ie.sql"] [unique_id "aK2QAEgfCfaT_u6a1qVrzwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-24 06:26:11
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 02:26:07.794640 2025] [security2:error] [pid 29807:tid 29807] [client 2a0b:f4c2::13:29566] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.goodfrequencies.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.goodfrequencies.com"] [uri "/goodfr.sql"] [unique_id "aKqwf_IOOMUMyANStFimDwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-24 02:00:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 23 22:00:17.952367 2025] [security2:error] [pid 8030:tid 8030] [client 2a0b:f4c2::13:32090] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||somehand.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "somehand.com"] [uri "/somehand.sql"] [unique_id "aKpyMaCd5MfZB8flOITq9gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-20 11:30:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 20 07:30:02.735569 2025] [security2:error] [pid 15211:tid 15211] [client 2a0b:f4c2::13:20232] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tortoisehosting.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tortoisehosting.com"] [uri "/tortoise.sql"] [unique_id "aKWxunyVf1qHnsBLkltKxAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-24 09:11:32
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 24 05:11:23.364717 2025] [security2:error] [pid 1568846:tid 1568846] [client 2a0b:f4c2::13:34956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.energytigers.needtoorder.com"] [uri "/.git/config"] [unique_id "aFpru5qvtEff_Wp3-CZXNAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2025-06-23 01:11:26
(1 year ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
TPI-Abuse
2025-06-21 22:43:52
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 21 18:43:43.857111 2025] [security2:error] [pid 3478991:tid 3478991] [client 2a0b:f4c2::13:28940] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jrwoodsrentals.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jrwoodsrentals.com"] [uri "/wp-config-sample.php.bak"] [unique_id "aFc1n3MdG61Rgnrbj6XeTQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-19 01:36:03
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 18 21:35:58.631063 2025] [security2:error] [pid 284027:tid 284027] [client 2a0b:f4c2::13:17388] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||eftekharschool.ir|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "eftekharschool.ir"] [uri "/bd.sql"] [unique_id "aFNpfisiDzBgOIYZZGzZ7wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-05-30 11:30:11
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇩🇪
LRob
2025-05-30 11:00:25
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇩🇪
LRob
2025-05-30 10:45:11
(1 year ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2025-05-28 12:36:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 28 08:36:04.065378 2025] [security2:error] [pid 1263593:tid 1263593] [client 2a0b:f4c2::13:50936] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bitcoinpornhub.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinpornhub.com"] [uri "/ub.sql"] [unique_id "aDcDNPn59qjslE6esJT5lgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-18 01:21:03
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::13 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 17 21:20:56.294511 2025] [security2:error] [pid 2810005:tid 2810005] [client 2a0b:f4c2::13:64442] [client 2a0b:f4c2::13] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||expresstires.us|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "expresstires.us"] [uri "/adminer.sql"] [unique_id "aCk1-OkPcP2fI3_swOslnwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack