2a0b:f4c2::27

(mod_security) mod_security (id:210831) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 15:40:22.752652 2026] [security2:error] [pid 2953:tid 2953] [c ... show more (mod_security) mod_security (id:210831) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 15:40:22.752652 2026] [security2:error] [pid 2953:tid 2953] [client 2a0b:f4c2::27:59704] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.imagineyourphotos.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.imagineyourphotos.com"] [uri "/"] [unique_id "asAIpkDpgKDWRv4p-o4hDgAAAAU"] show less

IPBlock protected site ID [3717-sec]. Robotic site crawling, undeclared spider

CrowdSec blocked: http:scan detected via OPNsense firewall

Blocked by UFW (TCP on 8333) Source port: 42816 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0027) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

CrowdSec blocked: http:scan detected via OPNsense firewall

CrowdSec blocked: http:scan detected via OPNsense firewall

berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mob ... show more berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:01 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:03 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:06 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" berlin01.tor-exit.artikel10.org - - [02/Aug/2026:21:09:08 +0200] "POST /wp-login.php HTTP/1.1" 200 3903 "https://ellenbakt.nl/wp-login.php" "Mozilla/5.0 (Linux; Android 12; motorola edge 20) Ap ... show less

CrowdSec blocked: http:scan detected via OPNsense firewall

Triggered Cloudflare WAF (firewallCustom) from T1. Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: / | UA: Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB

(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 10:57:59.724897 2026] [security2:error] [pid 19178:tid 19178] ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 10:57:59.724897 2026] [security2:error] [pid 19178:tid 19178] [client 2a0b:f4c2::27:12928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.title47.com"] [uri "/.git/config"] [unique_id "ak5ld6nzRHZFCFb9EcetuQAAAAg"] show less

(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 08:04:35.511008 2026] [security2:error] [pid 10766:tid 10766] ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 08:04:35.511008 2026] [security2:error] [pid 10766:tid 10766] [client 2a0b:f4c2::27:18690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.artisticheadstones.com"] [uri "/.git/config"] [unique_id "ajp2U0F8DqQHm-mKC4HjDQAAAAY"] show less

Blocked by UFW (TCP on 8333) Source port: 24116 Packet length: 80 This report (for 2a0b:f4c2:0000:0000:0000:0000:0000:0027) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:28:44.678046 2026] [security2:error] [pid 11901:tid 12041] ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:28:44.678046 2026] [security2:error] [pid 11901:tid 12041] [client 2a0b:f4c2::27:41950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nataxcyber.com.venezuelaguia.com"] [uri "/.git/config"] [unique_id "ajKE7N4x4a2QFIOIAiSW9QAAAFU"] show less

(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:54:01.518362 2026] [security2:error] [pid 22914:tid 22914] ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:54:01.518362 2026] [security2:error] [pid 22914:tid 22914] [client 2a0b:f4c2::27:20354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.heavenly-creatures.com"] [uri "/.git/config"] [unique_id "ai-hiaqvEgqyTigmaBWQkgAAAG4"] show less

(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:52:37.829491 2026] [security2:error] [pid 1708:tid 1708] [c ... show more (mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:52:37.829491 2026] [security2:error] [pid 1708:tid 1708] [client 2a0b:f4c2::27:32620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.rimaine.org"] [uri "/.git/config"] [unique_id "aiuChey72A_WlshH-pJ9uQAAAAQ"] show less