🇺🇸
TPI-Abuse
2024-03-01 07:25:07
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 01 02:25:01.510469 2024] [security2:error] [pid 20757] [client 146.70.81.157:11205] [client 146.70.81.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "protection4allsecurity.com"] [uri "/wp-content/themes/hakim/down.php"] [unique_id "ZeGCzSP5Q9vuI5YB2TvI6wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-01 06:28:31
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 01 01:28:27.250174 2024] [security2:error] [pid 25700] [client 146.70.81.157:54335] [client 146.70.81.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.prostar.industries"] [uri "/wp-content/themes/twentyseventeen/down.php"] [unique_id "ZeF1i5Bs_zXKJx3jXw6oOQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-01 05:30:27
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 01 00:30:21.696065 2024] [security2:error] [pid 30853] [client 146.70.81.157:53653] [client 146.70.81.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blog.proses-hr.com"] [uri "/wp-content/themes/twentytwentyone/down.php"] [unique_id "ZeFn7aVCO3YtBhSkJq0L4QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-01 03:16:02
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 29 22:15:57.714432 2024] [security2:error] [pid 4287:tid 47460313614080] [client 146.70.81.157:45675] [client 146.70.81.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.property-management-companies-chicago.com"] [uri "/wp-content/themes/twentysixteen/down.php"] [unique_id "ZeFIbVNKegM9LzqfQzngwgAAAgo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-02-29 20:16:30
(2 years ago)
(mod_security) mod_security triggered on hostname [redacted] 146.70.81.157 (AT/Austria/-)
SQL Injection
🇧🇷
hostseries
2024-02-29 16:15:43
(2 years ago)
Trigger: LF_MODSEC
Brute-Force
🇵🇱
rafix
2024-01-24 14:02:08
(2 years ago)
DDoS, #botnet240124
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2023-12-09 04:38:00
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 146.70.81.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 08 23:37:55.892456 2023] [security2:error] [pid 587764] [client 146.70.81.157:40305] [client 146.70.81.157] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnprcertificationreviews.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnprcertificationreviews.org"] [uri "/twitter.com"] [unique_id "ZXPvI9pVjqvt0hYGGW519gAAABU"], referer: https://cnprcertificationreviews.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
CrystalMaker
2023-11-15 07:13:43
(2 years ago)
Vulnerability scan - HEAD /feed/
Hacking
🇬🇧
CrystalMaker
2023-11-15 07:13:43
(2 years ago)
Vulnerability scan - HEAD /feed/
Hacking
🇺🇸
SiliSoftware
2023-11-15 06:28:04
(2 years ago)
/feed/
Web App Attack
2023-06-14 04:40:12
(3 years ago)
Web Spam
Email Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2023-02-11 05:04:36
(3 years ago)
Too many Status 40X (16)
Brute-Force
Web App Attack
🇩🇪
EIC
2023-02-11 01:02:54
(3 years ago)
(mod_security) mod_security triggered on hostname [redacted] 146.70.81.157 (AT/Austria/-): (CF_ENAB ...
show more
(mod_security) mod_security triggered on hostname [redacted] 146.70.81.157 (AT/Austria/-): (CF_ENABLE)
show less
SQL Injection
🇪🇸
10dencehispahard SL
2023-02-10 21:33:56
(3 years ago)
Suspicious activity detected by Modsecurity [Suspicious IP found on 6 servers 1107 times. Reincident ...
show more
Suspicious activity detected by Modsecurity [Suspicious IP found on 6 servers 1107 times. Reincident by 0. Rules:]
show less
Hacking
Web App Attack