2024-09-05 13:03:34
(1 year ago)
IP & Port Scan.
Port Scan
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-09-03 18:38:49
(1 year ago)
(mod_security) mod_security (id:211190) triggered by 104.238.37.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211190) triggered by 104.238.37.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 14:38:18.089005 2024] [security2:error] [pid 7067:tid 7067] [client 104.238.37.183:38419] [client 104.238.37.183] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||mail.stdavids-media.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /components/com_ionfiles/download.php?file=../../../../../../../../etc/passwd&download=1"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.stdavids-media.com"] [uri "/components/com_ionfiles/download.php"] [unique_id "ZtdXmlX60QX7VpkFcQfwDgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-01 01:55:47
(1 year ago)
(mod_security) mod_security (id:221260) triggered by 104.238.37.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:221260) triggered by 104.238.37.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 21:52:13.193260 2024] [security2:error] [pid 3087873:tid 3087885] [client 104.238.37.183:56277] [client 104.238.37.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||cpanel.kettlehill.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.kettlehill.net"] [uri "/cgi-bin/stats"] [unique_id "ZtPIzVZVdRO6ImKeyeuOLAAAAEo"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ps-center
2024-07-15 19:27:29
(1 year ago)
SS1: Web Attack GET /admin/pma/setup/index.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-07-14 01:02:53
(1 year ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
2024-06-27 11:45:04
(1 year ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2024-06-27 07:09:08
(1 year ago)
(mod_security) mod_security (id:211190) triggered by 104.238.37.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211190) triggered by 104.238.37.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 03:08:58.712977 2024] [security2:error] [pid 31357:tid 47386305898240] [client 104.238.37.183:55539] [client 104.238.37.183] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.kettlehill.net|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_jinventory&controller=../../../../../../../../../../etc/passwd%00"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.net"] [uri "/index.php"] [unique_id "Zn0QCuhhp4qy_W6hp2wr_wAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2024-05-08 19:19:15
(2 years ago)
Form spam
Web Spam
🇦🇺
oncord
2024-05-05 20:38:44
(2 years ago)
Form spam
Web Spam
2024-05-01 07:11:47
(2 years ago)
Web Spam
🇦🇺
MAGIC
2024-05-01 00:05:23
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
oncord
2024-04-28 01:00:28
(2 years ago)
Form spam
Web Spam
🇦🇺
oncord
2024-04-26 19:18:59
(2 years ago)
Form spam
Web Spam
🇺🇸
nowyouknow
2024-04-26 09:34:04
(2 years ago)
(From [email protected] ) Are you okay running your business without a lot of funds? This co ...
show more
(From [email protected] ) Are you okay running your business without a lot of funds? This could slow down growth and postpone returns on your business.
Now you have the Opportunity to get Funds for your Businesses and Projects without stress and the burden of repayment as our primary interest is in nurturing the growth of your business and projects, enabling you to achieve your desired business goals and dreams.
Take advantage of our Financing opportunity and receive funding for your enterprise and projects in days, and ample time for the loan term period, providing you ample time to grow and attain your business goals.
Contact us at:
+852 3008 8373,
or email us at:
[email protected]
Unsubscribe here if you don't want to get these great offers: https://docs.google.com/forms/d/e/1FAIpQLSdx-LI-ETiB-g37_ijIRHfBNhu__c-Go1dyOyZ_zU_pgeYTEg/viewform?usp=sf_link
Fjellfaret 94, Gloversville, NY, US, 4025
show less
Phishing
Web Spam
🇨🇭
backslash
2024-04-25 04:59:55
(2 years ago)
Web Spam