🇺🇸
TPI-Abuse
2025-11-08 13:08:16
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 08 08:08:09.292022 2025] [security2:error] [pid 9222:tid 9222] [client 2a0b:f4c2::14:12046] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kvaziri.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kvaziri.com"] [uri "/aziri.sql"] [unique_id "aQ9AuXTu1o097tUHSFhiJAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-06 01:27:42
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 20:27:33.126372 2025] [security2:error] [pid 32717:tid 32717] [client 2a0b:f4c2::14:44348] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||investorscalifornia.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "investorscalifornia.com"] [uri "/torscalifornia.sql"] [unique_id "aQv5hfoRUT3orbFLqW-ZNwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2025-11-04 17:30:27
(11 months ago)
(modsecurity) srv103 ModSecurity 2a0b:f4c2::14 (Unknown): 5 in the last 3600 secs; Ports: *; Directi ...
show more
(modsecurity) srv103 ModSecurity 2a0b:f4c2::14 (Unknown): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 08:14:09
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 04:14:03.543594 2025] [security2:error] [pid 3787:tid 3787] [client 2a0b:f4c2::14:54716] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mixmediallc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mixmediallc.com"] [uri "/mixme.sql"] [unique_id "aPnjy-2PNYoo6o-vGEjQnQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-23 04:46:14
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 23 00:46:05.606382 2025] [security2:error] [pid 20397:tid 20397] [client 2a0b:f4c2::14:43448] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||caddydad.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caddydad.com"] [uri "/ca.sql"] [unique_id "aPmzDaPdDVNUnNmnKQJssQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-17 15:22:57
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 17 11:22:51.588965 2025] [security2:error] [pid 9685:tid 9685] [client 2a0b:f4c2::14:38064] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grandriverhomes.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grandriverhomes.com"] [uri "/grandriv.sql"] [unique_id "aPJfS1RfiUTrsWHTt5WbJAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-13 23:14:55
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 19:14:48.957011 2025] [security2:error] [pid 31254:tid 31254] [client 2a0b:f4c2::14:3782] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tuantran.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tuantran.org"] [uri "/tuan.sql"] [unique_id "aO2H6NLyY0ctZ6q9Qi6gxQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-13 18:52:36
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 13 14:52:29.203097 2025] [security2:error] [pid 366:tid 366] [client 2a0b:f4c2::14:12546] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rockwaychiropractic.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rockwaychiropractic.com"] [uri "/rockwaychirop.sql"] [unique_id "aO1KbeCCST970ljwq30ldAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-12 18:37:01
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 14:36:55.446278 2025] [security2:error] [pid 19794:tid 19794] [client 2a0b:f4c2::14:7664] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||argentinas.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "argentinas.com"] [uri "/backups.sql"] [unique_id "aOv1RwOL6ODNKY25lcqoaQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2025-10-12 07:04:01
(1 year ago)
(db_admin_scan) srv103 DB admin scan 2a0b:f4c2::14 (Unknown): 1 in the last 3600 secs; Ports: *; Dir ...
show more
(db_admin_scan) srv103 DB admin scan 2a0b:f4c2::14 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Mangelot Hosting
2025-10-08 20:01:17
(1 year ago)
(modsecurity) srv103 ModSecurity 2a0b:f4c2::14 (Unknown): 5 in the last 3600 secs; Ports: *; Directi ...
show more
(modsecurity) srv103 ModSecurity 2a0b:f4c2::14 (Unknown): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-10-08 00:09:42
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 07 20:09:34.786942 2025] [security2:error] [pid 23429:tid 23429] [client 2a0b:f4c2::14:31384] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||circleofsound.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "circleofsound.org"] [uri "/circleof.sql"] [unique_id "aOWrvlnjTjPx2Ws1DD1iaQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-06 13:38:32
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::14 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 09:38:28.137968 2025] [security2:error] [pid 19142:tid 19142] [client 2a0b:f4c2::14:62082] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||copanmaya.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "copanmaya.org"] [uri "/copanmay.sql"] [unique_id "aOPGVMx84p6PttnBgS-YVwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2025-10-03 22:50:03
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2025-10-03 22:32:53
(1 year ago)
2025/10/04 00:32:53 [error] 535#164111: *629981 access forbidden by rule, client: 2a0b:f4c2::14, ser ...
show more
2025/10/04 00:32:53 [error] 535#164111: *629981 access forbidden by rule, client: 2a0b:f4c2::14, server: karolyimusic.com, request: "GET /.sql HTTP/2.0", host: "karolyimusic.com"
...
show less
Web Spam
