🇩🇪
spyra.rocks
2025-05-07 21:04:44
(1 year ago)
NAMED
DDoS Attack
🇺🇸
TPI-Abuse
2025-04-13 00:55:47
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 12 20:55:41.860735 2025] [security2:error] [pid 25592:tid 25592] [client 170.62.236.18:3545] [client 170.62.236.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||symbarenewables.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "symbarenewables.com"] [uri "/bak/wallet.dat"] [unique_id "Z_sLjWc5fqWXcuTjUqQQrwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2025-04-12 01:42:17
(1 year ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2025-04-11 08:28:30
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 11 04:28:23.693049 2025] [security2:error] [pid 13895:tid 13895] [client 170.62.236.18:62485] [client 170.62.236.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portfolioboosterllc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portfolioboosterllc.com"] [uri "/bak/sql.sql"] [unique_id "Z_jSpy5o2Q4u_Bv8CiiaWgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-04-08 00:31:01
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-04-06 22:34:56
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 06 18:34:48.657131 2025] [security2:error] [pid 8574:tid 8574] [client 170.62.236.18:51711] [client 170.62.236.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cier.xyz|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cier.xyz"] [uri "/back/wallet.dat"] [unique_id "Z_MBiBS95pJ8DcQrTBSHgwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2025-04-06 22:18:43
(1 year ago)
Fail2Ban apache-tripwires
Web App Attack
🇺🇸
TPI-Abuse
2025-04-05 21:38:04
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 05 17:37:57.407763 2025] [security2:error] [pid 2941324:tid 2941324] [client 170.62.236.18:25155] [client 170.62.236.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keychainfilms.com"] [uri "/backups/sftp-config.json"] [unique_id "Z_GitaBcjjccJ5oqtjzO1wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
pgpedia
2025-04-04 08:15:00
(1 year ago)
"Need more leads? Vetted sends you **100% free leads** from people looking for businesses they can t ...
show more
"Need more leads? Vetted sends you **100% free leads** from people looking for businesses they can trust! ..."
show less
Web Spam
🇺🇸
TPI-Abuse
2025-04-03 03:40:40
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 170.62.236.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 02 23:40:34.189358 2025] [security2:error] [pid 9945:tid 9945] [client 170.62.236.18:23607] [client 170.62.236.18] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bitcoinsquaretrader.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcoinsquaretrader.com"] [uri "/bak/dump.sql"] [unique_id "Z-4DMm7QjxjMn58UTQt6CAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack