🇺🇸
TPI-Abuse
2024-04-15 06:01:17
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 15 02:01:09.384936 2024] [security2:error] [pid 412] [client 199.249.230.159:40990] [client 199.249.230.159] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.crep-psych.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.crep-psych.org"] [uri "/ch.sql"] [unique_id "ZhzCpTChZUUsEp7zD7LRDwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
niceshops.com
2024-04-15 05:29:02
(2 years ago)
Web Attack multi (Apr 24 07:29:02 Matching rules: Detect possible SQL injection - E.g. Select * fro ...
show more
Web Attack multi (Apr 24 07:29:02 Matching rules: Detect possible SQL injection - E.g. Select * from )
show less
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2024-04-15 04:10:14
(2 years ago)
Brute force basic-auth access
Web App Attack
🇸🇪
webbfabriken
2024-04-14 03:10:30
(2 years ago)
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbf ...
show more
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabiken Security API - WFSecAPI
show less
Web Spam
🇺🇸
TPI-Abuse
2024-04-13 07:48:04
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 13 03:48:01.012828 2024] [security2:error] [pid 8380] [client 199.249.230.159:43568] [client 199.249.230.159] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kitebeach.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kitebeach.com"] [uri "/2020.sql"] [unique_id "Zho4sVFi_PRsXaf6QcZSNAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-10 10:03:09
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 10 06:03:03.921154 2024] [security2:error] [pid 2168] [client 199.249.230.159:52610] [client 199.249.230.159] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||elpaco.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elpaco.net"] [uri "/elpa.sql"] [unique_id "ZhZj1-P2NjLjRAMzztYbIAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-09 21:23:05
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 09 17:22:59.942780 2024] [security2:error] [pid 14836] [client 199.249.230.159:33676] [client 199.249.230.159] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jansenclaimsgroup.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jansenclaimsgroup.com"] [uri "/aimsgroup.sql"] [unique_id "ZhWxs6AuXpGr7326K9gZnAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-04-09 03:00:41
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇺🇸
TPI-Abuse
2024-04-08 21:15:47
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the l ...
show more
(mod_security) mod_security (id:210730) triggered by 199.249.230.159 (tor70.quintex.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 08 17:15:43.239720 2024] [security2:error] [pid 26587] [client 199.249.230.159:51578] [client 199.249.230.159] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||northstarstategolf.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "northstarstategolf.com"] [uri "/northstarsta.sql"] [unique_id "ZhRef3IQ_ve4B636yWVXXgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2024-02-15 05:15:38
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇴
tmiland
2024-02-14 22:50:00
(2 years ago)
(wordpress_xmlrpc) WordPress XMLPRC Attack 199.249.230.159 (US/United States/tor70.quintex.com): 3 i ...
show more
(wordpress_xmlrpc) WordPress XMLPRC Attack 199.249.230.159 (US/United States/tor70.quintex.com): 3 in the last 3600 secs
show less
Blog Spam
Brute-Force
Web App Attack
🇩🇪
niceshops.com
2024-02-14 14:58:59
(2 years ago)
Web Attack ([14/Feb/2024:15:58:53 +0100] )
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-02-12 23:20:03
(2 years ago)
SMS pumping attack (request flood from TOR)
DDoS Attack
🇩🇪
niceshops.com
2024-02-12 20:06:40
(2 years ago)
Web Attack ([12/Feb/2024:21:06:28 +0100] )
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
niceshops.com
2024-02-11 22:47:13
(2 years ago)
Web Attack multi (Feb 24 23:47:12 Matching rules: Detect possible SQL injection - Too many SQL keyw ...
show more
Web Attack multi (Feb 24 23:47:12 Matching rules: Detect possible SQL injection - Too many SQL keywords (more than 3 times),Detect possible SQL injection - E.g. Select * from )
show less
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack