|
🇩🇪
bitpanda
|
|
Malicious activity detected by Imunify360
|
Brute-Force
SSH
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 20 14:17:57.222450 2024] [security2:error] [pid 16673] [client 157.97.122.62:12141] [client 157.97.122.62] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bayareamustangs.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bayareamustangs.com"] [uri "/back/bayareamustangs.com.sql"] [unique_id "ZiQG1UX_ylJOftjD1HL4JgAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
hbrks
|
|
HEAD http://marche-be.com/back/directory.rar * statusCode: 503 *
|
Web Spam
Hacking
Bad Web Bot
|
|
|
🇩🇪
hbrks
|
|
HEAD http://techtronicgambia.com/restore/directory.gz * statusCode: 503 *
|
Web Spam
Hacking
Bad Web Bot
|
|
|
🇩🇪
hbrks
|
|
HEAD http://techtronicgambia.com/old/wallet.dat * statusCode: 503 *
|
Web Spam
Hacking
Bad Web Bot
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 08 07:39:28.427956 2024] [security2:error] [pid 20454] [client 157.97.122.62:35279] [client 157.97.122.62] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||crypto-stamps.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "crypto-stamps.com"] [uri "/backups/wallet.dat"] [unique_id "ZhPXcByqR_ZePildeVAtRAAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
octageeks.com
|
|
Wordpress malicious attack:[octa404]
|
Web App Attack
|
|
|
🇺🇸
octageeks.com
|
|
Wordpress malicious attack:[octa404]
|
Web App Attack
|
|
|
🇺🇸
octageeks.com
|
|
Wordpress malicious attack:[octa404]
|
Web App Attack
|
|
|
🇺🇸
octageeks.com
|
|
Wordpress malicious attack:[octa404]
|
Web App Attack
|
|
|
🇺🇸
TheMadBeaker
|
|
Fail2Ban Ban Triggered
HTTP SQL Injection Attempt
|
Hacking
SQL Injection
|
|
|
🇫🇷
Tonga-Soa
|
|
"use of nvopzp ... script by Dummies hackers"
|
SQL Injection
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 24 01:11:30.440022 2024] [security2:error] [pid 2128395] [client 157.97.122.62:16497] [client 157.97.122.62] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||firejasstrio.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firejasstrio.com"] [uri "/backup/wallet.dat"] [unique_id "Zf-2Apoc1MEnxEbOyvVDYgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 22 15:43:12.268454 2024] [security2:error] [pid 7266] [client 157.97.122.62:60437] [client 157.97.122.62] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||olimpiacerda.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "olimpiacerda.com"] [uri "/backup/sql.sql"] [unique_id "Zf3fUNW6PV56b3KP6Hz3oQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 157.97.122.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 20 01:42:12.427741 2024] [security2:error] [pid 17731] [client 157.97.122.62:6491] [client 157.97.122.62] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.hodlmoser.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.hodlmoser.com"] [uri "/bak/mysql.sql"] [unique_id "Zfp3NKxyN38m6zymqexQtwAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|