🇺🇸
TPI-Abuse
2026-01-26 00:09:58
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 19:09:53.734748 2026] [security2:error] [pid 3820:tid 3843] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 19:09:53.734748 2026] [security2:error] [pid 3820:tid 3843] [client 2a0b:f4c2::21:38458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.aiegroup.com"] [uri "/.git/config"] [unique_id "aXaw0UgZYWr_Lgx68n5AkQAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-25 21:53:38
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 16:53:31.748479 2026] [security2:error] [pid 8463:tid 8567] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 25 16:53:31.748479 2026] [security2:error] [pid 8463:tid 8567] [client 2a0b:f4c2::21:41994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.xavidominguez.com"] [uri "/.git/config"] [unique_id "aXaQ231g5ktgHOUqHKDzNgAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xmission.com
2026-01-14 02:42:20
UTC ·
(9 months ago)
Blocked by UFW (TCP on 8333)
Source port: 57734
Packet length: 80
This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0021) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸
TPI-Abuse
2026-01-12 10:54:35
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 05:54:32.080113 2026] [security2:error] [pid 15496:tid 15496] ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 12 05:54:32.080113 2026] [security2:error] [pid 15496:tid 15496] [client 2a0b:f4c2::21:26944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.roxieleigh.com"] [uri "/.git/config"] [unique_id "aWTS6I-s1ryFHNiXVCa0MQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-06 11:20:57
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 06 06:20:48.985897 2026] [security2:error] [pid 28842:tid 28842] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 06 06:20:48.985897 2026] [security2:error] [pid 28842:tid 28842] [client 2a0b:f4c2::21:12760] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||my-spec.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "my-spec.com"] [uri "/backupdb.sql"] [unique_id "aVzwEA56xB1yI7MTruxDxgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-05 01:14:14
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 20:14:08.036835 2026] [security2:error] [pid 16612:tid 16612] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 04 20:14:08.036835 2026] [security2:error] [pid 16612:tid 16612] [client 2a0b:f4c2::21:11128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||allotrope.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "allotrope.com"] [uri "/trope.sql"] [unique_id "aVsQYHUI2cYKwfrZr6cmywAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-02 15:58:06
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 10:58:01.332775 2026] [security2:error] [pid 14169:tid 14169] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 10:58:01.332775 2026] [security2:error] [pid 14169:tid 14169] [client 2a0b:f4c2::21:5822] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bigislandhawaiicoffee.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigislandhawaiicoffee.com"] [uri "/bigislandhawai.sql"] [unique_id "aVfrCXc-pFNl2pOGrsRqXAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-02 11:36:28
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 06:36:21.463533 2026] [security2:error] [pid 31734:tid 31734] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 06:36:21.463533 2026] [security2:error] [pid 31734:tid 31734] [client 2a0b:f4c2::21:16632] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hsoftwaresystems.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hsoftwaresystems.net"] [uri "/twaresystems_com.sql"] [unique_id "aVettSQWWytE9yAisH7uBgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-02 01:57:17
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 20:57:12.134817 2026] [security2:error] [pid 31071:tid 31071] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 01 20:57:12.134817 2026] [security2:error] [pid 31071:tid 31071] [client 2a0b:f4c2::21:44806] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||forwardti.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "forwardti.com"] [uri "/backupdb.sql"] [unique_id "aVcl-ETofjQbNFR2uyty6QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-31 02:17:03
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:17:00.046758 2025] [security2:error] [pid 29170:tid 29170] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 21:17:00.046758 2025] [security2:error] [pid 29170:tid 29170] [client 2a0b:f4c2::21:45416] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||betweentwotearsandshit.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "betweentwotearsandshit.com"] [uri "/backup.sql"] [unique_id "aVSHnExmCR1nYsPU3u32MwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-30 02:31:18
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 21:31:14.579729 2025] [security2:error] [pid 12996:tid 13071] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 21:31:14.579729 2025] [security2:error] [pid 12996:tid 13071] [client 2a0b:f4c2::21:9006] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||greaternorthmiamihistory.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "greaternorthmiamihistory.org"] [uri "/greaternorthmi.sql"] [unique_id "aVM5cmtO0w6z5P0XPJuAyAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-29 06:36:57
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:36:47.628838 2025] [security2:error] [pid 2616:tid 2616] [c ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:36:47.628838 2025] [security2:error] [pid 2616:tid 2616] [client 2a0b:f4c2::21:31828] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||guitarwisdom.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "guitarwisdom.com"] [uri "/tarwisdom_com.sql"] [unique_id "aVIhf1R-tTLEJjE_ohiviAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-12-23 12:49:25
UTC ·
(10 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /tools/ip-checker
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0
This report was generated by:
https ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /tools/ip-checker
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-17 15:33:18
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 10:33:14.953483 2025] [security2:error] [pid 21513:tid 21513] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 10:33:14.953483 2025] [security2:error] [pid 21513:tid 21513] [client 2a0b:f4c2::21:37320] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||constructiondomex.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "constructiondomex.com"] [uri "/backup_wp.sql"] [unique_id "aULNOmJkwTulKhgmdJM7DQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-16 16:00:00
UTC ·
(10 months ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 16 10:59:52.760194 2025] [security2:error] [pid 21812:tid 21812] ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::21 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 16 10:59:52.760194 2025] [security2:error] [pid 21812:tid 21812] [client 2a0b:f4c2::21:45730] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||davidharrisgriffith.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "davidharrisgriffith.com"] [uri "/davidharr.sql"] [unique_id "aUGB-LnXWEOLfUV3-kOlFQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
