2025-08-05 18:27:07
(1 year ago)
Infected user bad webscan
Exploited Host
🇺🇸
TPI-Abuse
2024-10-09 03:03:41
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 23:03:04.197944 2024] [security2:error] [pid 7568:tid 7568] [client 112.193.255.24:41216] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.zacharyschwartzman.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.zacharyschwartzman.com"] [uri "/com.sql"] [unique_id "ZwXyaGcqHIBC7z4vmNOhuAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-08 15:16:51
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 11:15:20.928534 2024] [security2:error] [pid 27380:tid 27380] [client 112.193.255.24:41476] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bernarrmacfadden.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bernarrmacfadden.com"] [uri "/js.bak"] [unique_id "ZwVMiCB9zd20M3BdzILYHwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-07 05:41:36
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 01:39:58.600184 2024] [security2:error] [pid 28098:tid 28098] [client 112.193.255.24:42729] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.med-engineering.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.med-engineering.com"] [uri "/2017.bak"] [unique_id "ZwN0LtIOdzpPK9ZQnSyB_wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-07 00:21:05
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 20:19:41.988286 2024] [security2:error] [pid 29228:tid 29261] [client 112.193.255.24:41907] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.super-8mm.net|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.super-8mm.net"] [uri "/backup.bak"] [unique_id "ZwMpHbRfv60bU8xFuVCFywAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-06 22:52:05
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 18:51:18.060339 2024] [security2:error] [pid 29997:tid 29997] [client 112.193.255.24:41016] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.humbliaslaw.com|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.humbliaslaw.com"] [uri "/www.backup"] [unique_id "ZwMUZnAIQqQrmVraDW45uQAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-05 09:30:30
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 05:30:17.607401 2024] [security2:error] [pid 16612:tid 16612] [client 112.193.255.24:64903] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.amywoodruff.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.amywoodruff.com"] [uri "/bbs.bak"] [unique_id "ZwEHKZdxNW40onPKKTgkqQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-05 08:20:27
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 04:19:07.693588 2024] [security2:error] [pid 18040:tid 18040] [client 112.193.255.24:64145] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mosherpit.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mosherpit.com"] [uri "/wordpress.bak"] [unique_id "ZwD2ew7Dh4kX2nQdT9aswgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-05 02:25:10
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 04 22:22:45.589716 2024] [security2:error] [pid 4130:tid 4130] [client 112.193.255.24:65116] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.wassusa.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wassusa.com"] [uri "/root.sql"] [unique_id "ZwCi9UZLAjWzSKgtTRdZ2AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-10-04 12:11:54
(2 years ago)
DoS Attack
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2024-10-03 14:52:10
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 10:50:49.139933 2024] [security2:error] [pid 7246:tid 7246] [client 112.193.255.24:63667] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.paulburns.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.paulburns.com"] [uri "/paulburnscom.sql"] [unique_id "Zv6vSZH1PqIsqJaEFILPewAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 12:02:31
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 08:01:31.590608 2024] [security2:error] [pid 11950:tid 11950] [client 112.193.255.24:63921] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.stinsonbeachsurfandkayak.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stinsonbeachsurfandkayak.com"] [uri "/joomla.sql"] [unique_id "Zv6Hm9guSPPfceTp0kv2owAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 03:32:19
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 23:32:12.494728 2024] [security2:error] [pid 20316:tid 20316] [client 112.193.255.24:64321] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sargentandco.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sargentandco.com"] [uri "/code.bak"] [unique_id "Zv4QPMIFTaij0GD1BgF7jQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 01:27:15
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 21:26:39.739767 2024] [security2:error] [pid 12330:tid 12330] [client 112.193.255.24:65092] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.folkdancers.org|F|2"] [data ".org.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.folkdancers.org"] [uri "/folkdancers.org.bak"] [unique_id "Zv3yz1XOukc-VG4E6wj5ywAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 00:05:11
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.24 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 20:01:22.647504 2024] [security2:error] [pid 30056:tid 30056] [client 112.193.255.24:64227] [client 112.193.255.24] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.passwordresearch.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.passwordresearch.com"] [uri "/2011.bak"] [unique_id "Zv3e0upfN2cKuEcLlbIC3QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack