🇩🇪
LRob
2025-08-30 23:45:42
(1 year ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2025-08-30 21:27:24
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 30 17:27:17.677047 2025] [security2:error] [pid 31809:tid 31809] [client 2a0b:f4c2::23:6114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.geckoturner.com"] [uri "/wp-config.php3.zip"] [unique_id "aLNstRGJjBOS-1pCYHRcdAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-26 11:38:53
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 07:38:49.120522 2025] [security2:error] [pid 19963:tid 19963] [client 2a0b:f4c2::23:18714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kporterdesign.com"] [uri "/wp-config.php.zip"] [unique_id "aK2cydzgYW88iYhIhBTRVwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-08-24 04:30:51
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇺🇸
TPI-Abuse
2025-08-22 06:22:10
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 02:22:04.409159 2025] [security2:error] [pid 10816:tid 10816] [client 2a0b:f4c2::23:4824] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rwabutazafoundation.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rwabutazafoundation.org"] [uri "/rwa.sql"] [unique_id "aKgMjI9vZrd5nTF2FkMLoQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-21 19:06:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 21 15:06:03.153131 2025] [security2:error] [pid 12988:tid 12988] [client 2a0b:f4c2::23:10940] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ketsuri.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ketsuri.com"] [uri "/registry.sql"] [unique_id "aKduG80r25-7SGP4FovBJwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-20 14:32:07
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 20 10:32:00.857030 2025] [security2:error] [pid 8761:tid 8761] [client 2a0b:f4c2::23:31300] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||webersource.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "webersource.com"] [uri "/wordpress.sql"] [unique_id "aKXcYCS1sfXPq-Fb51c79wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-20 07:02:22
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 20 03:02:14.801561 2025] [security2:error] [pid 14889:tid 14889] [client 2a0b:f4c2::23:6330] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||doctorbalog.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "doctorbalog.com"] [uri "/balog_com.sql"] [unique_id "aKVy9gxhNIKpKPBYgc9B0QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-16 13:12:29
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 16 09:12:24.983956 2025] [security2:error] [pid 1694341:tid 1694356] [client 2a0b:f4c2::23:44498] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jeanpaullederer.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jeanpaullederer.com"] [uri "/backup_default.sql"] [unique_id "aKCDuChNtTUAmVAIXuKjkwAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-16 02:45:39
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 15 22:45:33.550984 2025] [security2:error] [pid 1276:tid 1276] [client 2a0b:f4c2::23:49926] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||bonnesfrequences.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bonnesfrequences.com"] [uri "/bo.sql"] [unique_id "aJ_wzToSS2GSxRjK-vaeDwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-22 18:19:19
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 22 14:19:14.235274 2025] [security2:error] [pid 1211445:tid 1211445] [client 2a0b:f4c2::23:25344] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.georgegourmet.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.georgegourmet.com"] [uri "/urmet.sql"] [unique_id "aFhJIsuS_fAXCvu-di_CBwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-13 01:31:35
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 21:31:30.088135 2025] [security2:error] [pid 2995390:tid 2995390] [client 2a0b:f4c2::23:44998] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.daos.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.daos.org"] [uri "/wordpress_f.sql"] [unique_id "aEt_cv6VZFKmAGwOkPwLCgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2025-06-12 09:57:08
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇨🇳
ThreatBook.io
2025-05-16 22:58:01
(1 year ago)
2025-05-16 19:50:39 https://d3azdm1q0gvo54.cloudfront.net/
2025-05-16 19:46:34 http://d3ivqzdymldr3c ...
show more
2025-05-16 19:50:39 https://d3azdm1q0gvo54.cloudfront.net/
2025-05-16 19:46:34 http://d3ivqzdymldr3c.cloudfront.net/
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-05-11 00:47:26
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 10 20:47:19.850899 2025] [security2:error] [pid 3264351:tid 3264351] [client 2a0b:f4c2::23:5000] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||forerunnersjazz.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "forerunnersjazz.org"] [uri "/usr.sql"] [unique_id "aB_zl74KHJD9aEctL-UjUwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
