🇦🇺
MAGIC
2024-10-27 15:01:33
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
Anonymous
2024-10-25 15:41:33
UTC ·
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
🇦🇺
MAGIC
2024-10-25 13:05:22
UTC ·
(2 years ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-10-23 16:55:16
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 23 12:55:10.800610 2024] [security2:error] [pid 12718:t ...
show more
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 23 12:55:10.800610 2024] [security2:error] [pid 12718:tid 12718] [client 100.24.38.219:51954] [client 100.24.38.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.newisci.org|F|2"] [data ".safari-eha.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.newisci.org"] [uri "/expo_2025/www.safari-eha.com"] [unique_id "Zxkqbj7H-yECIpWgP48QLAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-23 07:01:06
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 23 03:01:01.051951 2024] [security2:error] [pid 19520:t ...
show more
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 23 03:01:01.051951 2024] [security2:error] [pid 19520:tid 19599] [client 100.24.38.219:41028] [client 100.24.38.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kerrfamilyassociation.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kerrfamilyassociation.com"] [uri "/[email protected] "] [unique_id "ZxifLS3nrVQNyJIePSd9ggAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
my.wildye.com
2024-10-23 03:17:41
UTC ·
(2 years ago)
AUTOMATED REPORT: Trying to spam. Automated form submission
Web Spam
🇺🇸
TPI-Abuse
2024-10-22 14:46:10
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 22 10:46:08.075649 2024] [security2:error] [pid 2627853 ...
show more
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 22 10:46:08.075649 2024] [security2:error] [pid 2627853:tid 2627853] [client 100.24.38.219:35724] [client 100.24.38.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.backstore.com|F|2"] [data ".losangelesseating.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.backstore.com"] [uri "/www.losangelesseating.com"] [unique_id "Zxe6sODmkmiB_PwPYz91EwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-21 12:49:32
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 21 08:49:28.379928 2024] [security2:error] [pid 12434:t ...
show more
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 21 08:49:28.379928 2024] [security2:error] [pid 12434:tid 12587] [client 100.24.38.219:43840] [client 100.24.38.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.munatseng.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.munatseng.org"] [uri "/stories/tsengkwongchi.com"] [unique_id "ZxZN2H2jSUm6HzMhAyGH0gAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Michael McCarthy
2024-10-20 20:27:38
UTC ·
(2 years ago)
Web Spam
🇦🇺
MAGIC
2024-10-20 13:06:58
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇨🇦
polycoda
2024-10-20 11:45:24
UTC ·
(2 years ago)
📄 Probes for tons of inexistent files and PHP scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-10-20 10:05:36
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 20 06:05:31.731036 2024] [security2:error] [pid 27476:t ...
show more
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 20 06:05:31.731036 2024] [security2:error] [pid 27476:tid 27476] [client 100.24.38.219:50634] [client 100.24.38.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.thequietplacemassage.net|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.thequietplacemassage.net"] [uri "/[email protected] "] [unique_id "ZxTV66MxR3-Tiob6zOK_eAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
valeon
2024-10-20 03:07:45
UTC ·
(2 years ago)
Bad Web Bot
Web App Attack
🇬🇧
my.wildye.com
2024-10-20 02:16:28
UTC ·
(2 years ago)
AUTOMATED REPORT: Trying to spam. Automated form submission
Web Spam
🇺🇸
TPI-Abuse
2024-10-19 14:22:44
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 19 10:22:40.385851 2024] [security2:error] [pid 3672:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 100.24.38.219 (ec2-100-24-38-219.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 19 10:22:40.385851 2024] [security2:error] [pid 3672:tid 3672] [client 100.24.38.219:46036] [client 100.24.38.219] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||climasyequipos.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "climasyequipos.com"] [uri "/[email protected] "] [unique_id "ZxPAsC5D09xN2dWNoLKdgAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack