🇨🇭
backslash
2025-09-12 10:25:06
(9 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-09-11 04:34:33
(9 months ago)
wordpress authentication brute force
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-09-10 04:32:51
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 00:32:46.800127 2025] [security2:error] [pid 10773:tid 10773] [client 156.253.170.115:12637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crystalvisionsart.benshermanguitar.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aMD_bu2Gfc_DRKYxLNZ8MwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-07 00:38:51
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 20:38:48.998554 2025] [security2:error] [pid 22287:tid 22287] [client 156.253.170.115:28829] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.costaricaencasa.galvez.cc|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.costaricaencasa.galvez.cc"] [uri "/s3cmd.ini"] [unique_id "aLzUGP9SV_RGAUynkw5oLQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-06 07:18:18
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 06 03:18:14.286407 2025] [security2:error] [pid 3871867:tid 3871905] [client 156.253.170.115:47033] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.charlottesvilleclosets.windowtailors.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.charlottesvilleclosets.windowtailors.com"] [uri "/s3cmd.ini"] [unique_id "aLvgNvNbdt8jgIewXJc6kgAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-02 12:53:28
(9 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-08-31 21:12:22
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 156.253.170.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 17:12:18.886485 2025] [security2:error] [pid 24071:tid 24071] [client 156.253.170.115:47477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blessedhavenfarm.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aLS6svUp441GWkpco9VePgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2025-08-28 10:34:53
(9 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇧🇪
voormedia
2025-08-26 18:50:49
(9 months ago)
Accessed trap at '/+CSCOE+/logon.html'
Web App Attack
🇧🇪
voormedia
2025-08-24 20:11:18
(9 months ago)
Accessed trap at '/wp-login.php'
Web App Attack
2025-08-14 10:34:10
(9 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
oncord
2025-04-07 00:01:57
(1 year ago)
Form spam
Web Spam
🇦🇺
oncord
2025-04-03 22:54:30
(1 year ago)
Form spam
Web Spam
🇦🇺
oncord
2025-04-01 19:19:01
(1 year ago)
Form spam
Web Spam
2025-04-01 05:03:24
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH