🇺🇸
TPI-Abuse
2025-05-07 02:15:14
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 22:15:07.355998 2025] [security2:error] [pid 71188:tid 71204] [client 2a0b:f4c2::23:24990] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||executive.bz|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "executive.bz"] [uri "/bd.sql"] [unique_id "aBrCK-U9PNO2JXafRbJZ1AAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-05-04 21:02:14
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-05-04 12:09:18
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 08:09:13.616509 2025] [security2:error] [pid 1832122:tid 1832252] [client 2a0b:f4c2::23:3962] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||munatseng.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "munatseng.org"] [uri "/bd.sql"] [unique_id "aBdY6ZxOpVDRWMlL6TvoGAAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2025-05-03 04:00:03
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from T1.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show more
Triggered Cloudflare WAF (firewallCustom) from T1.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /genshin-stella-mod/docs
UA: Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
XICTRON
2025-04-27 13:05:03
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2025-04-23 12:34:57
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 08:34:52.441919 2025] [security2:error] [pid 21908:tid 21908] [client 2a0b:f4c2::23:46388] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||n4fh.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "n4fh.com"] [uri "/administrator/backups/database.sql"] [unique_id "aAjebPOTfXRlhUSfyelH3gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2025-04-23 09:14:55
(1 year ago)
Wordpress login attempts
Brute-Force
🇺🇸
TPI-Abuse
2025-04-20 17:13:03
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 13:12:54.712891 2025] [security2:error] [pid 31926:tid 31926] [client 2a0b:f4c2::23:26400] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||messengersforchrist.charity|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "messengersforchrist.charity"] [uri "/administrator/backups/database.sql"] [unique_id "aAUrFnymjJoSWeESGnzquwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-16 01:50:29
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 15 21:50:19.640599 2025] [security2:error] [pid 6204:tid 6204] [client 2a0b:f4c2::23:34938] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hawaiivacations.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hawaiivacations.com"] [uri "/administrator/backups/database.sql"] [unique_id "Z_8M21-H8CF8GplS_pSHOgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2025-04-14 04:36:45
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-04-14 03:00:12
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 13 23:00:03.181183 2025] [security2:error] [pid 22388:tid 22388] [client 2a0b:f4c2::23:60576] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thesteeldrumman.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thesteeldrumman.com"] [uri "/wp-content/database.sql"] [unique_id "Z_x6M7Fr0Lxy7SaxJFxXRgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-11 03:14:22
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 10 23:14:18.928798 2025] [security2:error] [pid 3394:tid 3394] [client 2a0b:f4c2::23:15618] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jesussotoca.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jesussotoca.com"] [uri "/wp-content/db.sql"] [unique_id "Z_iJCg8t4nl32j2P0MOG7AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-09 15:20:57
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 11:20:52.099564 2025] [security2:error] [pid 26321:tid 26321] [client 2a0b:f4c2::23:42292] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||threewild.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "threewild.com"] [uri "/df_main.sql"] [unique_id "Z_aQVBEuISa7q4MUqI08IAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-04 15:43:42
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 11:43:37.401757 2025] [security2:error] [pid 8358:tid 8358] [client 2a0b:f4c2::23:56854] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||madisonventures.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "madisonventures.com"] [uri "/db.sql"] [unique_id "Z-_-KcIW3OQiUspYb-G-qwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-03 16:15:32
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::23 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 03 12:15:25.989694 2025] [security2:error] [pid 23221:tid 23221] [client 2a0b:f4c2::23:44000] [client 2a0b:f4c2::23] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rogerheath.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rogerheath.com"] [uri "/db.sql"] [unique_id "Z-60HaizzECW7Ldhd020uAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack