|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 09:06:06.287480 2025] [security2:error] [pid 25524:tid 25524] [client 154.94.15.21:17309] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.lahaciendaolivia.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lahaciendaolivia.com"] [uri "/s3cmd.ini"] [unique_id "aKhrPixcobQWzDD7TUpd3wAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 05:19:13.730668 2025] [security2:error] [pid 12000:tid 12000] [client 154.94.15.21:18181] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fellowshipfest.hisfavorite.net|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fellowshipfest.hisfavorite.net"] [uri "/s3cmd.ini"] [unique_id "aKg2Eb3NRgEBm9rVnjtkjgAAABk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 02:20:13.194533 2025] [security2:error] [pid 1212:tid 1212] [client 154.94.15.21:25755] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.computersgreensboro.computersraleigh.com"] [uri "/config.php%7C/.env%7Csettings.py%7C/.yaml%7C/.yml"] [unique_id "aKgMHQMHWU56yGjk_gUvswAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇮🇹
LTM
|
|
WebServer - Attempts to exploit
|
Hacking
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 15 02:43:08.831159 2025] [security2:error] [pid 15884:tid 15919] [client 154.94.15.21:50337] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||21370.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "21370.com"] [uri "/s3cmd.ini"] [unique_id "aJ7W_DT2q9VioZQt_5cQNwAAAFI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 154.94.15.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 01 12:34:57.185783 2025] [security2:error] [pid 16112:tid 16112] [client 154.94.15.21:19241] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mcacpas.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mcacpas.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aIzssWVMIcQY4aoUYuRdxQAAAAI"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Ports: 2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOM ...
show more
Ports: 2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER
show less
|
Brute-Force
SSH
|
|
|
🇮🇩
BPS-StatisticsIndonesia
|
|
XML RPC Scan Activities
|
Brute-Force
Web App Attack
|
|
|
🇩🇪
Packets-Decreaser.NET
|
|
Incoming Layer 7 Flood Detected
|
DDoS Attack
Web Spam
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 154.94.15.21
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 154.94.15.21
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 154.94.15.21
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 154.94.15.21
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇨🇱
ifiguero
|
|
Web Attack (WordPress search). 30m ban
|
Web App Attack
|
|
|
🇪🇸
librebit
|
|
RDWeb scan
|
Web App Attack
|
|