🇺🇸
TPI-Abuse
2025-05-05 09:55:54
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 05:55:50.491254 2025] [security2:error] [pid 669226:tid 669226] [client 2a0b:f4c2::30:41954] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||targethk.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "targethk.net"] [uri "/wp-content/database.sql"] [unique_id "aBiLJrdBj-JreJbGQaIrIAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-04 21:36:39
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 04 17:36:32.540952 2025] [security2:error] [pid 1663352:tid 1663352] [client 2a0b:f4c2::30:7454] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||footballxp.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "footballxp.com"] [uri "/migration.sql"] [unique_id "aBfd4PnlTYVEknegAoSuYQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-24 05:03:04
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 01:02:59.959913 2025] [security2:error] [pid 7360:tid 7360] [client 2a0b:f4c2::30:15178] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billymitchell.com"] [uri "/wp-config.old.new"] [unique_id "aAnGA7x0YnLcuR2aIhL8bAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-22 14:16:06
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 10:15:57.652341 2025] [security2:error] [pid 22524:tid 22524] [client 2a0b:f4c2::30:13658] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brexitop.com"] [uri "/wp-config.php_backup"] [unique_id "aAeknaepjy7lTgsu2kVIhQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 18:43:59
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 20 14:43:55.666357 2025] [security2:error] [pid 13945:tid 13945] [client 2a0b:f4c2::30:64580] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||isslv.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isslv.net"] [uri "/administrator/backups/database-sql.sql"] [unique_id "aAVAa0zis7yaIcWA2GpBdwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-20 03:55:10
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 23:55:04.541789 2025] [security2:error] [pid 30401:tid 30401] [client 2a0b:f4c2::30:28182] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sekelconsulting.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sekelconsulting.com"] [uri "/administrator/backups/wp-sql.sql"] [unique_id "aARwGH9st_HOVMjjEgP_EAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-19 07:11:46
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 19 03:11:41.532768 2025] [security2:error] [pid 14222:tid 14222] [client 2a0b:f4c2::30:27780] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jerryfeil.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jerryfeil.com"] [uri "/administrator/backups/database-sql.sql"] [unique_id "aANMrRlHG1UNNpQOR8UTlgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2025-04-16 21:49:42
(1 year ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-04-14 21:12:08
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 17:12:02.380916 2025] [security2:error] [pid 21218:tid 21218] [client 2a0b:f4c2::30:7420] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||brentsagnotti.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "brentsagnotti.com"] [uri "/administrator/backups/database-sql.sql"] [unique_id "Z_16ItYuZiX6vAN5HLMlMAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-14 19:40:12
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 14 15:40:04.700593 2025] [security2:error] [pid 19487:tid 19487] [client 2a0b:f4c2::30:15988] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tlc-computing.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tlc-computing.com"] [uri "/administrator/backups/database-sql.sql"] [unique_id "Z_1klFPu8K7YrCbwQ3Et4wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-09 07:22:27
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 03:22:22.649118 2025] [security2:error] [pid 2265604:tid 2265604] [client 2a0b:f4c2::30:64930] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.insidepublications.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.insidepublications.com"] [uri "/wp-content/database.sql"] [unique_id "Z_YgLr1kRpFCvfkhyT8u0AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-09 06:34:37
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 09 02:34:28.402705 2025] [security2:error] [pid 2943:tid 2943] [client 2a0b:f4c2::30:55468] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||smilingorc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "smilingorc.com"] [uri "/wp-content/database.sql"] [unique_id "Z_YU9JA5B0FnhQ3OxuiwLQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-08 07:23:56
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 03:23:45.870918 2025] [security2:error] [pid 1429459:tid 1429459] [client 2a0b:f4c2::30:24452] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tcit.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tcit.org"] [uri "/db.sql"] [unique_id "Z_TPARzyhLbbAl7AIAY5jgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-04 07:37:43
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::30 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 04 03:37:36.339417 2025] [security2:error] [pid 11367:tid 11367] [client 2a0b:f4c2::30:11940] [client 2a0b:f4c2::30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nearfieldchrist.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nearfieldchrist.com"] [uri "/database.sql"] [unique_id "Z--MQJXXqkt3hS7qkFIhSQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-03 16:30:22
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
