🇺🇸
TPI-Abuse
2024-06-03 07:57:35
(2 years ago)
(mod_security) mod_security (id:240950) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:240950) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 03 03:57:29.202220 2024] [security2:error] [pid 18534] [client 130.185.154.194:52226] [client 130.185.154.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)||goldengatecorgis.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "goldengatecorgis.org"] [uri "/"] [unique_id "Zl13aQJGDI9oSo8r106oAwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Justmee
2024-04-29 00:58:09
(2 years ago)
Apr 28 18:58:05 server1 kernel: [502117.596595] IPTABLES: IN=eth0 OUT= MAC=00:22:19:d7:2c:94:e8:ea:6 ...
show more
Apr 28 18:58:05 server1 kernel: [502117.596595] IPTABLES: IN=eth0 OUT= MAC=00:22:19:d7:2c:94:e8:ea:6a:97:e0:32:08:00 SRC=130.185.154.194 DST=192.168.100.3 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=35588 PROTO=TCP SPT=47613 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0
Apr 28 18:58:06 server1 kernel: [502118.597597] IPTABLES: IN=eth0 OUT= MAC=00:22:19:d7:2c:94:e8:ea:6a:97:e0:32:08:00 SRC=130.185.154.194 DST=192.168.100.3 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=35589 PROTO=TCP SPT=47613 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0
Apr 28 18:58:08 server1 kernel: [502120.599557] IPTABLES: IN=eth0 OUT= MAC=00:22:19:d7:2c:94:e8:ea:6a:97:e0:32:08:00 SRC=130.185.154.194 DST=192.168.100.3 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=35590 PROTO=TCP SPT=47613 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0
...
show less
Hacking
Brute-Force
🇪🇸
10dencehispahard SL
2024-04-24 03:01:30
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇬🇧
Steve
2024-03-27 01:28:05
(2 years ago)
Excessive crawling - not obeying robots.txt
Bad Web Bot
🇪🇸
10dencehispahard SL
2024-03-24 11:01:13
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇨🇭
backslash
2024-02-27 06:55:46
(2 years ago)
Web Spam
🇪🇸
10dencehispahard SL
2024-02-22 15:01:33
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇬🇧
Steve
2024-02-16 15:36:53
(2 years ago)
Excessive crawling - not obeying robots.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2024-02-11 14:05:20
(2 years ago)
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 11 09:05:15.087849 2024] [security2:error] [pid 27381] [client 130.185.154.194:42335] [client 130.185.154.194] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||doodlemags.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "doodlemags.com"] [uri "/"] [unique_id "ZcjUG2JO6crs_UfRI2MTfAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-11 13:41:57
(2 years ago)
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 11 08:41:50.625606 2024] [security2:error] [pid 6286] [client 130.185.154.194:51618] [client 130.185.154.194] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||mylaboyd.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "mylaboyd.com"] [uri "/"] [unique_id "ZcjOnuNYBaWcBNSgopjBqgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-11 12:53:03
(2 years ago)
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 11 07:52:57.309591 2024] [security2:error] [pid 17282] [client 130.185.154.194:39732] [client 130.185.154.194] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||kaplankrew.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "kaplankrew.com"] [uri "/"] [unique_id "ZcjDKavogYEutt1utcrImQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-11 11:31:21
(2 years ago)
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 130.185.154.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 11 06:31:16.498834 2024] [security2:error] [pid 2907] [client 130.185.154.194:49969] [client 130.185.154.194] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||stephenjewson.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "stephenjewson.com"] [uri "/"] [unique_id "ZciwBPkWVkCI3xcG8SOMygAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack