🇺🇸
TPI-Abuse
2025-06-20 23:30:14
(11 months ago)
(mod_security) mod_security (id:210730) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 20 19:30:10.593745 2025] [security2:error] [pid 2982873:tid 2982873] [client 193.233.82.169:50625] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Laurel/Thumbs.db"] [unique_id "aFXvAi8aO5J-c3FaqqwxuwAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Laurel/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2025-06-09 01:10:06
(1 year ago)
WAF: Block Joomla registration spam 2- wsit
Email Spam
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2025-06-06 05:00:17
(1 year ago)
WAF: Block Joomla registration spam 2- wsit
Email Spam
Brute-Force
🇪🇸
10dencehispahard SL
2025-05-14 05:21:56
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
🇺🇸
TPI-Abuse
2025-05-12 10:29:32
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 12 06:29:26.296284 2025] [security2:error] [pid 2692636:tid 2692636] [client 193.233.82.169:62753] [client 193.233.82.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nekstlevel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nekstlevel.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCHNhqT1V2bA_RtL3ksNpgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-05 09:59:27
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 04:59:15.215053 2025] [security2:error] [pid 32180:tid 32180] [client 193.233.82.169:33437] [client 193.233.82.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Gesture Stool/Thumbs.db"] [unique_id "Z8ggczG66u833BMf0BdQOAAAAAY"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/Gesture%20Stool/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-27 14:15:00
(1 year ago)
Used in a distributed login attack
Brute-Force
🇨🇭
backslash
2024-11-01 12:15:05
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇨🇦
wil.com
2024-09-24 01:36:31
(1 year ago)
GlobalProtect login attempts with user gwest.
VPN IP
Brute-Force
2024-05-24 05:01:55
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-02-22 16:34:28
(2 years ago)
Malicious activity detected
Hacking
Web App Attack
2024-02-16 20:44:00
(2 years ago)
"Path Traversal"
Web App Attack
🇺🇸
TPI-Abuse
2024-02-09 05:50:15
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 193.233.82.169 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 09 00:50:08.029365 2024] [security2:error] [pid 2360] [client 193.233.82.169:40607] [client 193.233.82.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Scooters/Buzzaround Lite/Thumbs.db"] [unique_id "ZcW9EPk9gyCRGOuP89eCrgAAAAQ"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Scooters/Buzzaround%20Lite/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2023-11-18 21:01:58
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2023-11-04 13:02:55
(2 years ago)
VM2 Bad user agents ignoring web crawling rules. Draining bandwidth
DDoS Attack
Bad Web Bot