|
🇳🇿
FaB Property Group
|
|
Requested file: telerik.web.ui.webresource.axd?type=rau
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:20:10.024593 2026] [security2:error] [pid 3599:tid 3599] ...
show more
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:20:10.024593 2026] [security2:error] [pid 3599:tid 3599] [client 144.172.115.10:57120] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.madbomberfireworks.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.madbomberfireworks.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aujUWkePl7Kns41RgN76iwAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
ipblock.com
|
|
IPBlock protected site ID [4055-d][s=03].
Exploit request, vulnerability scanner.
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:14:03.588892 2026] [security2:error] [pid 32174:tid 3217 ...
show more
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:14:03.588892 2026] [security2:error] [pid 32174:tid 32174] [client 144.172.115.10:57704] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.globaldentalservices.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.globaldentalservices.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aujE2xaDHZMDPttiYMGg9gAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:53:53.532011 2026] [security2:error] [pid 32450:tid 3245 ...
show more
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:53:53.532011 2026] [security2:error] [pid 32450:tid 32450] [client 144.172.115.10:56360] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.heathdiesel.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.heathdiesel.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "aujAIQyjIqrszwltbT1qZQAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:36:47.654083 2026] [security2:error] [pid 32616:tid 3261 ...
show more
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:36:47.654083 2026] [security2:error] [pid 32616:tid 32616] [client 144.172.115.10:61826] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.albertmassaad.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.albertmassaad.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "auiuD8r5Or7NjjLg_V1THQAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇯🇵
Valhalla
|
|
/Telerik.Web.UI.WebResource.axd?type=rau
|
Hacking
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:18:36.734336 2026] [security2:error] [pid 14360:tid 1436 ...
show more
(mod_security) mod_security (id:210730) triggered by 144.172.115.10 (10.115.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:18:36.734336 2026] [security2:error] [pid 14360:tid 14360] [client 144.172.115.10:55495] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sjtent.com|F|2"] [data ".web.ui.webresource.axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sjtent.com"] [uri "/Telerik.Web.UI.WebResource.axd"] [unique_id "auibvNFnoi06f2jsk1FGNwAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
dpsbs
|
|
multiple ips intrustions detected
|
Hacking
|
|
Anonymous
|
|
SIEM ALERT AUTO REPORT
|
Email Spam
|
|
🇺🇸
ipblock.com
|
|
IPBlock protected site ID [4730-fr].
Exploit request, vulnerability scanner.
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇺🇸
ipblock.com
|
|
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇹🇷
LiterallyEthical
|
|
Suspicious traffic detected, abnormal activity on web ui
|
Web App Attack
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
Anonymous
|
|
Banned by SPAMHAUS ASN-DROP list (ASN: 14956)
|
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
|