🇩🇪
HandyTreff.de
2026-02-22 05:04:47
(3 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.518 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -31.518 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Sa
show less
Web App Attack
Bad Web Bot
🇩🇪
ps-center
2024-07-16 00:59:45
(1 year ago)
SS1: Web Attack GET /php/phpmyadmin/scripts/setup.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-07-05 09:16:51
(1 year ago)
(mod_security) mod_security (id:221260) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:221260) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 05 05:14:12.520535 2024] [security2:error] [pid 14532:tid 47646802855680] [client 161.123.208.35:43743] [client 161.123.208.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^(?:\\\\'\\\\w+?=)?\\\\(\\\\)\\\\s{" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "77"] [id "221260"] [rev "3"] [msg "COMODO WAF: Shellshock Command Injection Vulnerabilities in GNU Bash through 4.3 bash43-026 (CVE-2014-7187, CVE-2014-7186, CVE-2014-7169, CVE-2014-6278, CVE-2014-6277, CVE-2014-6271)||mail.kettlehill.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kettlehill.net"] [uri "/debug.cgi"] [unique_id "Zoe5ZB6vg0VWluVRLyaPrgAAAQ0"], referer: () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-06-28 10:08:08
(1 year ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇪🇸
10dencehispahard SL
2024-05-08 07:00:43
(2 years ago)
Unauthorized login attempts []
Brute-Force
🇪🇸
10dencehispahard SL
2024-05-08 06:30:00
(2 years ago)
Web Attack
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-04-10 02:54:10
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 09 22:50:29.967292 2024] [security2:error] [pid 2213:tid 47092013680384] [client 161.123.208.35:40001] [client 161.123.208.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.kettlehill.net"] [uri "/.htpasswd"] [unique_id "ZhX-dRqHnosD1eOeitQ-yQAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-03-27 07:00:25
(2 years ago)
Unauthorized login attempts [ BI-16635]
Brute-Force
🇪🇸
10dencehispahard SL
2024-03-27 06:52:34
(2 years ago)
WP scan
Web App Attack
2024-03-06 00:46:45
(2 years ago)
Common attack or app scan event detected and blocked
Port Scan
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-01-26 19:36:05
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 26 14:35:59.642449 2024] [security2:error] [pid 10059] [client 161.123.208.35:38161] [client 161.123.208.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stdavids-media.com"] [uri "/.wp-config.php.swp"] [unique_id "ZbQJn5UK9g25B6cJU3scxQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-05 17:28:52
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 161.123.208.35 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 05 12:28:15.262891 2023] [security2:error] [pid 13031:tid 47074298922752] [client 161.123.208.35:55993] [client 161.123.208.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kettlehill.net"] [uri "/sftp-config.json"] [unique_id "ZW9dr9tqHp3YxbpW33G_zgAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-11-27 13:55:05
(2 years ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack