🇺🇸
kosada.com
2025-09-17 15:01:09
(1 year ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
rdpguard.com
2024-10-22 06:57:52
(1 year ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2024-10-08 15:16:43
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 08 11:15:13.730468 2024] [security2:error] [pid 28262:tid 28262] [client 112.193.255.49:20828] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bernarrmacfadden.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bernarrmacfadden.com"] [uri "/joomla.bak"] [unique_id "ZwVMgS8CsfrbUax2IFcdggAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-07 07:50:43
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 03:49:16.920024 2024] [security2:error] [pid 26460:tid 26460] [client 112.193.255.49:21667] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.valkyriepanthers.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.valkyriepanthers.com"] [uri "/2011.sql"] [unique_id "ZwOSfKXWyC46MddqThFLqQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-06 22:51:08
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 06 18:51:02.366173 2024] [security2:error] [pid 29684:tid 29684] [client 112.193.255.49:22013] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.humbliaslaw.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.humbliaslaw.com"] [uri "/2010.bak"] [unique_id "ZwMUVretHjtYf3vo_EI4SQAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-06 03:32:38
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 23:31:06.185594 2024] [security2:error] [pid 3893:tid 3893] [client 112.193.255.49:20724] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bigkevsperformance.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigkevsperformance.com"] [uri "/index.sql"] [unique_id "ZwIEehOdENYw6qonZlLzsQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-05 20:14:22
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 16:13:13.565839 2024] [security2:error] [pid 15133:tid 15133] [client 112.193.255.49:22373] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.taskmasterstech.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.taskmasterstech.com"] [uri "/taskmasterstechcom.bak"] [unique_id "ZwGd2VIaJXjRqSCD8w8ZrAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-05 09:30:40
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 05 05:30:26.578920 2024] [security2:error] [pid 23873:tid 23873] [client 112.193.255.49:21359] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.amywoodruff.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.amywoodruff.com"] [uri "/local.bak"] [unique_id "ZwEHMnKWyeeDsJdVdp6RKgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-10-04 12:14:56
(2 years ago)
DoS Attack
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2024-10-03 14:52:35
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 10:50:45.626053 2024] [security2:error] [pid 7379:tid 7379] [client 112.193.255.49:21824] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.paulburns.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.paulburns.com"] [uri "/master.bak"] [unique_id "Zv6vRU7KCpAXBiEbnmvu6gAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 00:05:06
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 20:01:32.000554 2024] [security2:error] [pid 13263:tid 13263] [client 112.193.255.49:21541] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.passwordresearch.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.passwordresearch.com"] [uri "/orders.bak"] [unique_id "Zv3e2ziM_aQ_aNbxNClWqQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-02 23:12:49
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:11:34.603005 2024] [security2:error] [pid 29672:tid 29672] [client 112.193.255.49:21118] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ussmauryags16.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ussmauryags16.org"] [uri "/members.bak"] [unique_id "Zv3TJrbcBE4s4vVOaFIixwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-02 06:16:21
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 02:16:10.679660 2024] [security2:error] [pid 9967:tid 9967] [client 112.193.255.49:22008] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.valuechains4poor.net|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.valuechains4poor.net"] [uri "/2014.bak"] [unique_id "ZvzlKjQwK-7E_Fe0qJaJBAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-01 18:13:34
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 14:12:04.467103 2024] [security2:error] [pid 27655:tid 27655] [client 112.193.255.49:31036] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.highaltitudebaking.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.highaltitudebaking.com"] [uri "/my.sql"] [unique_id "ZtSudAop2oBssb09sYiSkQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-01 04:56:46
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 00:55:16.763376 2024] [security2:error] [pid 629:tid 629] [client 112.193.255.49:32053] [client 112.193.255.49] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hshr.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hshr.com"] [uri "/user.bak"] [unique_id "ZtPztEOHtLGluDoZ3XjhpQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack