ππ°
CyberFox
2026-10-12 01:26:12
(2 days ago)
14865/tcp (1 or more attempts)
Port Scan
ππ°
ιΉιΉ
2026-10-12 01:04:05
(2 days ago)
monitor: on ser162528253480 | port: 14833 | ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Repor ...
show more
monitor: on ser162528253480 | port: 14833 | ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
ππ°
CyberFox
2026-10-11 19:22:41
(2 days ago)
11795/tcp (1 or more attempts)
Port Scan
ππ°
ιΉιΉ
2026-10-11 13:08:08
(2 days ago)
monitor: on ser162528253480 | port: 10407 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Repor ...
show more
monitor: on ser162528253480 | port: 10407 | ttl: 127 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2026-10-11 12:55:31
(2 days ago)
10407/tcp (1 or more attempts)
Port Scan
π«π·
oonux.net
2025-02-02 07:02:15
(1 year ago)
RouterOS: The host 178.128.124.44 trying to use anonymous proxy
Hacking
Bad Web Bot
Exploited Host
πΊπΈ
TPI-Abuse
2023-12-29 07:24:03
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 29 02:23:55.776159 2023] [security2:error] [pid 6862:tid 47504372569856] [client 178.128.124.44:61697] [client 178.128.124.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alexanderwarnow.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alexanderwarnow.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZY50CxutWNZrXlBHqsYgDQAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2023-12-28 04:15:52
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 23:15:45.134083 2023] [security2:error] [pid 31162] [client 178.128.124.44:57644] [client 178.128.124.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sand-ventures.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sand-ventures.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZYz2cQ_W-D6VpxmzyJFq5AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2023-12-26 22:34:08
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 26 17:34:00.101460 2023] [security2:error] [pid 31651] [client 178.128.124.44:56358] [client 178.128.124.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||onewithaudio.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "onewithaudio.com"] [uri "/wp-content/uploads/slideshow-gallery/slideshow-gallery.php.bak"] [unique_id "ZYtU2KJYLcRS7-SZdsfSAAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2023-12-26 20:20:58
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 26 15:20:54.956681 2023] [security2:error] [pid 28587:tid 47063861581568] [client 178.128.124.44:64746] [client 178.128.124.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tomskrodzki.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tomskrodzki.com"] [uri "/wp-content/uploads/slideshow-gallery/slideshow-gallery.php.bak"] [unique_id "ZYs1pqibLA_Oaz7UuS08BwAAAck"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2023-12-24 17:43:36
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 12:43:34.911416 2023] [security2:error] [pid 2419] [client 178.128.124.44:56222] [client 178.128.124.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||atasantehealth.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "atasantehealth.com"] [uri "/wp-content/uploads/slideshow-gallery/slideshow-gallery.php.bak"] [unique_id "ZYhtxqQTAFqUHZYq7FrFygAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
Apache
2023-12-24 14:16:49
(2 years ago)
(mod_security) mod_security (id:20000010) triggered by 178.128.124.44 (SG/Singapore/-): 5 in the las ...
show more
(mod_security) mod_security (id:20000010) triggered by 178.128.124.44 (SG/Singapore/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2023-12-24 11:45:19
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 24 06:45:15.193664 2023] [security2:error] [pid 22194] [client 178.128.124.44:57811] [client 178.128.124.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thefitzgeralds.org|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thefitzgeralds.org"] [uri "/wp-content/uploads/slideshow-gallery/slideshow-gallery.php.bak"] [unique_id "ZYgZy4yRqr4im-f2ZQ5baQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2023-12-23 15:51:23
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.124.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 23 10:51:16.164119 2023] [security2:error] [pid 10692] [client 178.128.124.44:64245] [client 178.128.124.44] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||texassong.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "texassong.com"] [uri "/wp-content/uploads/slideshow-gallery/slideshow-gallery.php.bak"] [unique_id "ZYcB9FVRZq-BchrYlw45OwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack