🇺🇸
kosada.com
2025-09-19 13:42:40
(1 year ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-15 17:17:49
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 15 13:17:37.911254 2025] [security2:error] [pid 23312:tid 23312] [client 112.193.255.58:14330] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1194/game/43895/"] [unique_id "aMhKMfbMNyKzF8OBBtp-2gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
rdpguard.com
2024-10-21 00:22:21
(1 year ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2024-10-05 02:25:05
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 04 22:22:44.520054 2024] [security2:error] [pid 6928:tid 6928] [client 112.193.255.58:44244] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.wassusa.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wassusa.com"] [uri "/com.bak"] [unique_id "ZwCi9LUi1uaWZjHqth1V1wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-04 20:17:21
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 04 16:15:42.006573 2024] [security2:error] [pid 29584:tid 29584] [client 112.193.255.58:44115] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.kithouse.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.kithouse.org"] [uri "/jsp.bak"] [unique_id "ZwBM7tssOabOhkYOr_iceQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-10-04 12:15:39
(2 years ago)
DoS Attack
DDoS Attack
Brute-Force
🇺🇸
TPI-Abuse
2024-10-03 22:11:48
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 18:11:41.328339 2024] [security2:error] [pid 29935:tid 29935] [client 112.193.255.58:43081] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.soudertonbigred.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.soudertonbigred.org"] [uri "/2016.bak"] [unique_id "Zv8WnRyUngUqKRGaH5AuMwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 14:52:05
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 10:50:37.911766 2024] [security2:error] [pid 5357:tid 5357] [client 112.193.255.58:43194] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.paulburns.com|F|2"] [data ".0.0.1.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.paulburns.com"] [uri "/127.0.0.1.sql"] [unique_id "Zv6vPZw3NgyZYM5icJ7i1AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-03 12:02:16
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 03 08:01:29.538087 2024] [security2:error] [pid 11887:tid 11887] [client 112.193.255.58:44859] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.stinsonbeachsurfandkayak.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stinsonbeachsurfandkayak.com"] [uri "/files.bak"] [unique_id "Zv6HmeSyZSJbMrP-yOGy9QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-02 23:51:39
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:50:57.972748 2024] [security2:error] [pid 20913:tid 20913] [client 112.193.255.58:44368] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bobbyunser.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bobbyunser.com"] [uri "/media.sql"] [unique_id "Zv3cYd2HiJ5IGmwDyy0dtwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-02 23:13:47
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:11:34.856165 2024] [security2:error] [pid 29723:tid 29723] [client 112.193.255.58:44991] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ussmauryags16.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ussmauryags16.org"] [uri "/bak.bak"] [unique_id "Zv3TJunrDt6ZCJwGIfkOhgAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-01 21:11:39
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 01 17:09:18.674204 2024] [security2:error] [pid 20362:tid 20362] [client 112.193.255.58:43111] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.femalegamblers.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.femalegamblers.org"] [uri "/site.bak"] [unique_id "Zvxk_o4I1Ub9rBVS6YG2zQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-01 11:52:20
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 01 07:50:14.806455 2024] [security2:error] [pid 16665:tid 16665] [client 112.193.255.58:44764] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.studiopilates.net|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.studiopilates.net"] [uri "/files.bak"] [unique_id "Zvvh9vQFysJ9BDPgi63BUQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-01 09:10:35
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 05:09:01.425423 2024] [security2:error] [pid 7041:tid 7041] [client 112.193.255.58:30541] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.wincourtransportation.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wincourtransportation.com"] [uri "/localhost.bak"] [unique_id "ZtQvLZ6x9MfBh4IvX5ZdRAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-01 04:58:06
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 112.193.255.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 00:55:09.811963 2024] [security2:error] [pid 882:tid 882] [client 112.193.255.58:29780] [client 112.193.255.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hshr.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hshr.com"] [uri "/master.sql"] [unique_id "ZtPzrdTSr7UVIieAI8fA-AAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack