🇳🇱
Mangelot Hosting
2025-09-20 13:52:07
(1 year ago)
(modsecurity) srv103 ModSecurity 2a0b:f4c2::16 (Unknown): 5 in the last 3600 secs; Ports: *; Directi ...
show more
(modsecurity) srv103 ModSecurity 2a0b:f4c2::16 (Unknown): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 04:26:11
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 00:26:03.237602 2025] [security2:error] [pid 8867:tid 8867] [client 2a0b:f4c2::16:20278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrizel.com"] [uri "/.env"] [unique_id "aMzbW1joQPKRPslETh55SQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-18 04:48:44
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 00:48:38.306099 2025] [security2:error] [pid 26156:tid 26156] [client 2a0b:f4c2::16:21524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tracytappan.net"] [uri "/wp-config.php~~"] [unique_id "aMuPJksxk_Q5mFyf-MaH3wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-18 00:12:45
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 20:12:37.206922 2025] [security2:error] [pid 28437:tid 28437] [client 2a0b:f4c2::16:17486] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||robertgregorybrowne.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "robertgregorybrowne.com"] [uri "/rybrowne.sql"] [unique_id "aMtOdd5vqCSUyNl9mPRcRQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agenciahypelab.com.br
2025-09-17 19:04:16
(1 year ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-09-17 07:50:24
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 03:50:20.251294 2025] [security2:error] [pid 31234:tid 31234] [client 2a0b:f4c2::16:28176] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.firstunitedreserve.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.firstunitedreserve.com"] [uri "/edreserve.sql"] [unique_id "aMpoPPVBnTRSjU5aXN8PZgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-13 22:01:45
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 18:01:42.392740 2025] [security2:error] [pid 31775:tid 31775] [client 2a0b:f4c2::16:2316] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||catsandtentacles.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "catsandtentacles.com"] [uri "/catsandtent.sql"] [unique_id "aMXpxl-x4FnPVSYG36HXPAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 05:08:36
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 01:08:27.425619 2025] [security2:error] [pid 1147:tid 1147] [client 2a0b:f4c2::16:18846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||guldunyayayinlari.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "guldunyayayinlari.com"] [uri "/backups.sql"] [unique_id "aMJZS6KJs6Eg8SqsnfUBsgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-09 09:11:20
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 05:11:11.605058 2025] [security2:error] [pid 6758:tid 6758] [client 2a0b:f4c2::16:8912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marjosse.com"] [uri "/wp-config.php.zip"] [unique_id "aL_vLynQNar1MZltJvE62AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-08 16:04:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 12:04:17.054285 2025] [security2:error] [pid 28094:tid 28094] [client 2a0b:f4c2::16:13178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seagrovesrealty.com"] [uri "/wp-config.php.zip"] [unique_id "aL7-gQHNpPqa0HnwJiTmowAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2025-09-07 13:20:16
(1 year ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2025-09-07 13:17:02
(1 year ago)
2025/09/07 15:17:02 [error] 41854#733119: *34588 access forbidden by rule, client: 2a0b:f4c2::16, se ...
show more
2025/09/07 15:17:02 [error] 41854#733119: *34588 access forbidden by rule, client: 2a0b:f4c2::16, server: ipariapro.hu, request: "GET / HTTP/2.0", host: "ipariapro.hu", referrer: "http://ipariapro.hu/"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2025-09-05 16:27:14
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 05 12:27:07.671069 2025] [security2:error] [pid 8540:tid 8540] [client 2a0b:f4c2::16:5096] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kawkacevents.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kawkacevents.com"] [uri "/kaw.sql"] [unique_id "aLsPW0BrdyTezOfppwP56QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-05 10:16:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::16 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 05 06:16:41.437953 2025] [security2:error] [pid 4753:tid 4753] [client 2a0b:f4c2::16:37292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crittergetterpestcontrol.com"] [uri "/wp-config.php.zip"] [unique_id "aLq4iS4XXwg611idfCVQDQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2025-09-04 20:10:28
(1 year ago)
Probing for application vulnerabilities
Brute-Force
Web App Attack