🇨🇭
backslash
2025-05-24 01:35:06
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇦🇺
oncord
2025-05-16 16:28:08
(1 year ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-05-09 01:49:27
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 21:49:23.220575 2025] [security2:error] [pid 3793678:tid 3793678] [client 193.233.210.179:22575] [client 193.233.210.179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||harvestfrc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harvestfrc.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aB1fI0q0RUeNSkiDiH81vgAAAAs"], referer: https://harvestfrc.com/wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-08 06:13:17
(1 year ago)
(mod_security) mod_security (id:217280) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:217280) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 02:13:09.787911 2025] [security2:error] [pid 960589:tid 960589] [client 193.233.210.179:12845] [client 193.233.210.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?:\\\\n|\\\\r)+(?:get|post|head|options|connect|put|delete|trace|propfind|propatch|mkcol|copy|move|lock|unlock)\\\\s+" at MATCHED_VAR. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "137"] [id "217280"] [rev "6"] [msg "COMODO WAF: HTTP Request Smuggling Attack||www.fintastic.co.za|F|2"] [data "Matched Data: head found within MATCHED_VAR"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fintastic.co.za"] [uri "/contact/"] [unique_id "aBxLdRWqbxOqvUC-tbUwTwAAAAg"], referer: http://www.fintastic.co.za/contact/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-12-01 07:45:37
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 02:45:33.327954 2024] [security2:error] [pid 3682154:tid 3682154] [client 193.233.210.179:32535] [client 193.233.210.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Cooper/Thumbs.db"] [unique_id "Z0wUHZ0Up2WYwT-atDR7pgAAAAU"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Cooper/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-05-14 18:40:09
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2024-04-14 09:23:45
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 193.233.210.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 05:23:39.160165 2024] [security2:error] [pid 23624] [client 193.233.210.179:32627] [client 193.233.210.179] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Catnapper/images/Bronson/Thumbs.db"] [unique_id "Zhugm4G3-EvmnqipctEBnQAAABM"], referer: https://vitalitywebb.com/backstore/Catnapper/images/Bronson/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-04-12 00:10:31
(2 years ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇩🇪
niceshops.com
2023-07-14 00:00:24
(2 years ago)
Web Attack multi (Jul 23 23:09:13 Matching rules: Detect possible SQL injection - Too many SQL keyw ...
show more
Web Attack multi (Jul 23 23:09:13 Matching rules: Detect possible SQL injection - Too many SQL keywords (more than 3 times),Detect possible SQL injection - E.g. Sleep(5),Detect possible SQL injection - E.g. Select * from )
show less
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
niceshops.com
2023-07-11 00:00:28
(2 years ago)
Web Attack multi (Jul 23 23:36:29 Matching rules: Detect possible SQL injection - E.g. Waitfor .. D ...
show more
Web Attack multi (Jul 23 23:36:29 Matching rules: Detect possible SQL injection - E.g. Waitfor .. Delay )
show less
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
VSM Networks
2022-08-08 10:29:32
(3 years ago)
Credential Stuffing
Brute-Force
🇮🇪
RoboSOC
2022-07-30 02:58:24
(3 years ago)
HTTP Cross Site Scripting Vulnerability , PTR: PTR record not found
Web App Attack