🇺🇸
TPI-Abuse
2024-09-03 18:41:16
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 193.36.172.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 193.36.172.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 14:40:50.185431 2024] [security2:error] [pid 11127:tid 11127] [client 193.36.172.45:47751] [client 193.36.172.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.stdavids-media.com"] [uri "/wp-config.old"] [unique_id "ZtdYMl4M0ACjnPeZ1C01JwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-09-01 01:54:51
(1 year ago)
(mod_security) mod_security (id:212620) triggered by 193.36.172.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 193.36.172.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 21:52:24.307909 2024] [security2:error] [pid 3087700:tid 3087753] [client 193.36.172.45:49049] [client 193.36.172.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||staging.kettlehill.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /wp-content/plugins/jsmol2wp/php/jsmol.php?isform=true&call=savefile&data=</script><script>alert(document.domain)</script>&mimetype=text/html;charset=utf-8"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "staging.kettlehill.com"] [uri "/wp-content/plugins/jsmol2wp/php/jsmol.php"] [unique_id "ZtPI2NyH84duF-C5mXVIsAAAAZc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-07-24 01:07:17
(1 year ago)
Common attack or app scan event detected and blocked
Port Scan
Hacking
Web App Attack
🇩🇪
ps-center
2024-07-15 18:04:20
(1 year ago)
SS1: Web Attack POST /wp-admin/admin-ajax.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-06-27 16:08:28
(1 year ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
2024-06-27 11:55:03
(1 year ago)
| XSS (Cross Site Scripting) attempt.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2024-06-27 07:10:19
(1 year ago)
(mod_security) mod_security (id:240950) triggered by 193.36.172.45 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240950) triggered by 193.36.172.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 03:10:11.647878 2024] [security2:error] [pid 31360:tid 47386305898240] [client 193.36.172.45:33029] [client 193.36.172.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)||webmail.kettlehill.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "webmail.kettlehill.net"] [uri "/jira/secure/QueryComponentRendererValue!Default.jspa"] [unique_id "Zn0QU1yO989uQdQJj5NXJQAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ChamberofCommerce.com
2023-11-05 23:43:20
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot
🇺🇸
ChamberofCommerce.com
2023-10-30 21:06:57
(2 years ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:226
show less
Bad Web Bot