🇺🇸
TPI-Abuse
2025-09-04 16:13:14
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 12:13:09.386436 2025] [security2:error] [pid 22483:tid 22543] [client 2a0b:f4c2::25:19682] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alancphotography.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alancphotography.com"] [uri "/aphy_com.sql"] [unique_id "aLm6levLXTtWBfcbfibP_AAAAYc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-02 15:39:45
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 02 11:39:38.554611 2025] [security2:error] [pid 27574:tid 27574] [client 2a0b:f4c2::25:23730] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||shhcenter.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "shhcenter.com"] [uri "/sh.sql"] [unique_id "aLcPugQqHar44We__2re8wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-02 02:54:06
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 01 22:54:03.200207 2025] [security2:error] [pid 16437:tid 16437] [client 2a0b:f4c2::25:59302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thesalonx.com"] [uri "/wp-config.php.save.1.zip"] [unique_id "aLZcS9yTlsSr_LV2yiI8AgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-30 00:44:22
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 29 20:44:17.616761 2025] [security2:error] [pid 3634:tid 3634] [client 2a0b:f4c2::25:60544] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pixelspective.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pixelspective.com"] [uri "/pi.sql"] [unique_id "aLJJYX-8nXCIupMTtFzbigAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-29 07:54:37
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 29 03:54:30.777103 2025] [security2:error] [pid 25298:tid 25298] [client 2a0b:f4c2::25:41288] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dwightbrown.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dwightbrown.com"] [uri "/daily.sql"] [unique_id "aLFctot6gycZ_Co70LX0DAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2025-08-28 14:09:40
(1 year ago)
(mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:949110) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-08-27 18:06:45
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 27 14:06:39.557504 2025] [security2:error] [pid 3861:tid 3861] [client 2a0b:f4c2::25:28684] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||viszin.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "viszin.com"] [uri "/backup.sql"] [unique_id "aK9JL1RMNfXpcn47o1INHQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2025-08-27 07:47:05
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-08-26 08:37:55
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 26 04:37:51.697175 2025] [security2:error] [pid 24318:tid 24318] [client 2a0b:f4c2::25:12466] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.abcollie.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.abcollie.com"] [uri "/a.sql"] [unique_id "aK1yX8n3XpoGLJvvj_twNwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-24 11:01:07
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 24 07:00:59.856142 2025] [security2:error] [pid 31094:tid 31094] [client 2a0b:f4c2::25:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.upskirtcrazy.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.upskirtcrazy.com"] [uri "/wordpress.sql"] [unique_id "aKrw68K4IyAcj9yvJt_T2AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2025-08-23 13:04:44
(1 year ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-08-22 16:39:59
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 12:39:55.887677 2025] [security2:error] [pid 15551:tid 15551] [client 2a0b:f4c2::25:2116] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||suswastima.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "suswastima.com"] [uri "/daily.sql"] [unique_id "aKidW-kuKQ-8UU8Nt18bqQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-08-16 13:57:55
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 16 09:57:45.425451 2025] [security2:error] [pid 27807:tid 27807] [client 2a0b:f4c2::25:62934] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jtagulator.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jtagulator.com"] [uri "/jtagulato.sql"] [unique_id "aKCOWTAWZiulvaS5DBJ_xQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-06-25 19:07:24
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::25 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 25 15:07:19.341154 2025] [security2:error] [pid 1168491:tid 1168491] [client 2a0b:f4c2::25:22732] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||niseigroup.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "niseigroup.com"] [uri "/2023-eigroup.sql"] [unique_id "aFxI56yIaFaH6UaNh7_KdgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-06-20 17:45:41
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
