🇺🇸
TPI-Abuse
2025-09-29 15:14:10
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 29 11:14:02.422262 2025] [security2:error] [pid 4189638:tid 4189734] [client 2a0b:f4c2::27:52166] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.vancekelly.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vancekelly.com"] [uri "/backupdb.sql"] [unique_id "aNqiOlKUbnkGgG707KLi1wAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-27 08:10:19
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 27 04:10:12.248347 2025] [security2:error] [pid 15245:tid 15245] [client 2a0b:f4c2::27:62576] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grandriverhomes.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grandriverhomes.com"] [uri "/grandriverhom.sql"] [unique_id "aNeb5OiYFgjYjSkB9uVVNwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-26 03:30:00
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 23:29:57.449521 2025] [security2:error] [pid 32068:tid 32068] [client 2a0b:f4c2::27:3232] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||abcollie.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "abcollie.com"] [uri "/lie.sql"] [unique_id "aNYItYA8DjYGSpy3IyDrkQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-23 22:13:44
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 23 18:13:36.610666 2025] [security2:error] [pid 32073:tid 32073] [client 2a0b:f4c2::27:27218] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cauchosindustrialesespeciales.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cauchosindustrialesespeciales.com"] [uri "/ciales.sql"] [unique_id "aNMbkFE67mPPr2HzgXepOQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 03:27:14
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 23:27:10.881323 2025] [security2:error] [pid 16907:tid 16907] [client 2a0b:f4c2::27:9470] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnphilos.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnphilos.com"] [uri "/philos_com.sql"] [unique_id "aNDCDuBoaU__AzD0Vk4PRwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-21 01:44:16
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 20 21:44:09.368265 2025] [security2:error] [pid 5899:tid 5899] [client 2a0b:f4c2::27:37198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sfgardening.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sfgardening.com"] [uri "/sfga.sql"] [unique_id "aM9YaRM5vOLZODzMVKJdmgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 05:46:05
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 01:45:58.283178 2025] [security2:error] [pid 22017:tid 22142] [client 2a0b:f4c2::27:4616] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||talenttourhrservices.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "talenttourhrservices.com"] [uri "/tale.sql"] [unique_id "aMzuFq1lzg4sCsIdmeaKSAAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-18 04:31:42
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇳🇱
Mangelot Hosting
2025-09-16 16:44:53
(1 year ago)
(db_admin_scan) srv101 DB admin scan 2a0b:f4c2::27 (Unknown): 1 in the last 3600 secs; Ports: *; Dir ...
show more
(db_admin_scan) srv101 DB admin scan 2a0b:f4c2::27 (Unknown): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-09-16 09:19:03
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 16 05:18:59.068955 2025] [security2:error] [pid 14130:tid 14130] [client 2a0b:f4c2::27:23476] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||truthsabouthealthcare.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "truthsabouthealthcare.com"] [uri "/hsabouthealthcare.sql"] [unique_id "aMkrgy9-6tPcC1rF92edwgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-15 17:13:41
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 15 13:13:36.635736 2025] [security2:error] [pid 19686:tid 19686] [client 2a0b:f4c2::27:14702] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||forerunnersjazz.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "forerunnersjazz.org"] [uri "/backups.sql"] [unique_id "aMhJQDbZPbf7kOI1iXl1QAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-15 00:19:42
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 20:19:37.720910 2025] [security2:error] [pid 3585:tid 3628] [client 2a0b:f4c2::27:25260] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nabsci.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nabsci.com"] [uri "/backups.sql"] [unique_id "aMdbmS_SySjkD1y2gLlv4wAAAY0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-14 18:19:44
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 14:19:36.652709 2025] [security2:error] [pid 27403:tid 27403] [client 2a0b:f4c2::27:60874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arkafeart.com"] [uri "/wp-config.php.zip"] [unique_id "aMcHOOIEPpj6gYH7hvTDCwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-14 11:15:13
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 14 07:15:05.074464 2025] [security2:error] [pid 11012:tid 11012] [client 2a0b:f4c2::27:5932] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||desertalfas.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "desertalfas.org"] [uri "/talfas.sql"] [unique_id "aMajuY4tDN165WpQWV7-SQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-13 20:48:26
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::27 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 16:48:22.141360 2025] [security2:error] [pid 21398:tid 21398] [client 2a0b:f4c2::27:3910] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||budfromstlouis.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "budfromstlouis.com"] [uri "/budfromst.sql"] [unique_id "aMXYlrdjm47zUyXJJnwmlwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
