🇩🇪
MarkGGN
2025-10-13 22:48:57
(1 year ago)
Webexploits. 2a0b:f4c2::17 - - [14/Oct/2025:00:48:55 +0200] "GET /mysql/index.php HTTP/2.0" 301 162 ...
show more
Webexploits. 2a0b:f4c2::17 - - [14/Oct/2025:00:48:55 +0200] "GET /mysql/index.php HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.4.4; SGH-M919 Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.109 Mobile Safari/537.36"
2a0b:f4c2::17 - - [14/Oct/2025:00:48:56 +0200] "GET /sql/index.php HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Linux; Android 4.4.4; SGH-M919 Build/KTU84P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.109 Mobile Safari/537.36"
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-06 16:45:39
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 06 12:45:35.111712 2025] [security2:error] [pid 16380:tid 16402] [client 2a0b:f4c2::17:46682] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||heworeblack.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "heworeblack.com"] [uri "/heworeblack.sql"] [unique_id "aOPyL5xsJd-5mgB5xdqRUQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-05 14:00:10
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 05 10:00:03.669249 2025] [security2:error] [pid 19535:tid 19535] [client 2a0b:f4c2::17:20198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bigheartskitchen.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigheartskitchen.net"] [uri "/bigheartskitc.sql"] [unique_id "aOJ54_Mq6Bw_AlWkFWJGmgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-05 13:01:05
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 05 09:00:57.871153 2025] [security2:error] [pid 21871:tid 21871] [client 2a0b:f4c2::17:25266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.t9teamsportinggoods.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.t9teamsportinggoods.com"] [uri "/t9team.sql"] [unique_id "aOJsCYmDn_hjUGaMlB7obgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-30 02:25:30
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 29 22:25:23.938714 2025] [security2:error] [pid 1332:tid 1332] [client 2a0b:f4c2::17:37344] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bolivarbulletintimes.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bolivarbulletintimes.com"] [uri "/bolivarbulletinti.sql"] [unique_id "aNs_kxkH4OmdMEY10Q3utgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-28 11:45:29
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 28 07:45:20.631747 2025] [security2:error] [pid 3089512:tid 3089517] [client 2a0b:f4c2::17:20674] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.rwabutaza.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rwabutaza.com"] [uri "/utaza.sql"] [unique_id "aNkf0JTD6G0QF0LAQU887gAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2025-09-26 12:29:08
(1 year ago)
common Web Exploits being scanned
Web App Attack
🇺🇸
TPI-Abuse
2025-09-25 10:49:34
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 06:49:28.572538 2025] [security2:error] [pid 11392:tid 11392] [client 2a0b:f4c2::17:19922] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ohwaitiforgot.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ohwaitiforgot.com"] [uri "/latest.sql"] [unique_id "aNUeOA3ZNcTamlHGyDYiGgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2025-09-25 08:08:41
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-09-25 01:14:33
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 24 21:14:26.636969 2025] [security2:error] [pid 18718:tid 18718] [client 2a0b:f4c2::17:37876] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||natickvillagerentals.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "natickvillagerentals.com"] [uri "/natickvillage.sql"] [unique_id "aNSXci26_PwU3NSfE4wfWwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-20 17:47:59
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 13:47:52.859398 2025] [security2:error] [pid 29193:tid 29193] [client 2a0b:f4c2::17:39002] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||paulshorrock.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "paulshorrock.com"] [uri "/p.sql"] [unique_id "aM7oyIcpx0xaz-6tkRH-wgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-17 11:13:59
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 07:13:51.106436 2025] [security2:error] [pid 22564:tid 22564] [client 2a0b:f4c2::17:49304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlecreekrvranch.com"] [uri "/wp-config.php.zip"] [unique_id "aMqX75rLmoctA7lbP1lXhQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-17 07:50:28
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 03:50:23.117628 2025] [security2:error] [pid 29969:tid 29969] [client 2a0b:f4c2::17:61078] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||firstunitedreserve.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firstunitedreserve.com"] [uri "/firstunitedres.sql"] [unique_id "aMpoP-VpKaYMqNCXDV46zgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 10:03:05
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 06:03:00.251053 2025] [security2:error] [pid 28909:tid 28909] [client 2a0b:f4c2::17:47920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcintoshgop.org"] [uri "/wp-config.php.zip"] [unique_id "aMk11PSAVIXkiAbF3LuuxAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-08 12:16:02
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::17 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 08 08:15:54.942596 2025] [security2:error] [pid 24801:tid 24801] [client 2a0b:f4c2::17:43020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quicksmogsandiego.com"] [uri "/wp-config.txt"] [unique_id "aL7I-seaK-xFlj9CzIqHOwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack