🇺🇸
TPI-Abuse
2024-01-10 13:52:02
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 10 08:51:58.619241 2024] [security2:error] [pid 18065] [client 178.128.208.198:53876] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||blacksheepoffroad.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blacksheepoffroad.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZ6g_tNVHViFzYdte0OGewAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-10 13:32:09
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 10 08:32:06.361114 2024] [security2:error] [pid 23929] [client 178.128.208.198:63073] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||oshadega.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oshadega.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZ6cVraRABwEX6InBUrUXgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-09 22:14:28
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 09 17:14:23.437890 2024] [security2:error] [pid 27576] [client 178.128.208.198:56936] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||ornbaum.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ornbaum.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZ3FP0VLJuwBkSuj2AwO5gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
QT
2024-01-09 11:11:24
(2 years ago)
Website hack attempted at 2024-01-09 21:11:22 +1000
Web App Attack
🇺🇸
TPI-Abuse
2024-01-09 06:04:11
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 09 01:04:06.259669 2024] [security2:error] [pid 31963] [client 178.128.208.198:56847] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||superzilla.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "superzilla.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZzh1gB8dKjtM5cjldEatwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-09 03:41:20
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 08 22:41:15.198486 2024] [security2:error] [pid 22179] [client 178.128.208.198:51569] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||orcastrong.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "orcastrong.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZzAW6Aw0yuHWO3HM3lJEwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2024-01-08 20:36:42
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇬🇧
AFRICARGUS
2024-01-08 17:38:16
(2 years ago)
Mass attack from script kiddie trying practically everything in the book, without success. Over 1500 ...
show more
Mass attack from script kiddie trying practically everything in the book, without success. Over 1500 malicious GET requests plus brute force attacks.
show less
DDoS Attack
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2024-01-08 14:26:00
(2 years ago)
Web attack from 178.128.208.198
Web App Attack
🇳🇱
maxxsense
2024-01-08 13:50:34
(2 years ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 178.128.208.198 (SG/Sing ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 178.128.208.198 (SG/Singapore/-)
show less
Port Scan
🇺🇸
TPI-Abuse
2024-01-08 12:06:58
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 08 07:06:53.066736 2024] [security2:error] [pid 21988] [client 178.128.208.198:57631] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||isullc.net|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isullc.net"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZvlXbDlJBAXFRd3VofcEQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-07 23:28:24
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 07 18:28:19.981319 2024] [security2:error] [pid 17123] [client 178.128.208.198:64331] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||bikinitweets.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bikinitweets.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZszk1JqzXmqYSgAyMA1-gAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-07 21:05:46
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 07 16:05:38.696643 2024] [security2:error] [pid 24808] [client 178.128.208.198:64323] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||isitel.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isitel.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZsSIvql7Omm2-StLm8YUwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-07 18:36:41
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 07 13:36:35.114524 2024] [security2:error] [pid 27612] [client 178.128.208.198:56693] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||oogeothermal.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oogeothermal.com"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZrvM1a4dxaMW9_8RBJFyAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-07 12:52:50
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 178.128.208.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jan 07 07:52:43.719428 2024] [security2:error] [pid 16988] [client 178.128.208.198:63409] [client 178.128.208.198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bigheartskitchen.net|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigheartskitchen.net"] [uri "/slideshow-gallery.php.bak"] [unique_id "ZZqem9UH8_timND0rJZaswAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack