🇨🇦
wil.com
2025-05-14 06:42:45
(1 year ago)
GlobalProtect login attempts with user ryee.
VPN IP
Brute-Force
🇺🇸
TPI-Abuse
2025-05-08 09:48:15
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 05:48:10.293461 2025] [security2:error] [pid 1815876:tid 1815876] [client 209.87.169.167:47183] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campbellfrost.art"] [uri "/.env"] [unique_id "aBx92pD6_bTTNzKJHnqQcAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
service Informatique
2025-04-18 04:00:37
(1 year ago)
GET /sslvpn
Web App Attack
🇺🇸
NXTwoThou
2025-03-28 18:29:03
(1 year ago)
/vpn/index.html
Web App Attack
🇩🇪
marzzzello
2025-03-21 19:48:48
(1 year ago)
Ports: 3x 34104
Port Scan
🇺🇸
mnsf
2025-03-18 05:06:41
(1 year ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 18:31:06
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 14:31:00.135275 2025] [security2:error] [pid 4768:tid 4768] [client 209.87.169.167:25071] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fatcaverecords.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "Z9hqZKldaFmluWZ3zXom0AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-17 10:51:40
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 17 06:51:35.161184 2025] [security2:error] [pid 7292:tid 7292] [client 209.87.169.167:21919] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonnesfrequences.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Z9f-twm6T6zoa3G_g9htMAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-03-17 03:05:18
(1 year ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-16 07:19:54
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 03:19:47.395748 2025] [security2:error] [pid 3183:tid 3183] [client 209.87.169.167:37417] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abecasis.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "Z9Z7k3NajrgSS5SsHGSbVwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-16 05:44:05
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 01:43:57.366533 2025] [security2:error] [pid 25068:tid 25068] [client 209.87.169.167:44289] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.healthmarkcounseling.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.healthmarkcounseling.com"] [uri "/wp-content/debug.log"] [unique_id "Z9ZlHdLn7nqEwyNxLa_tBQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-03-16 02:05:18
(1 year ago)
Too many Status 40X (14)
Scanning/Probing (32)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-15 22:27:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 15 18:27:14.729623 2025] [security2:error] [pid 27428:tid 27516] [client 209.87.169.167:22219] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||duplexgoldmine.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "duplexgoldmine.com"] [uri "/wp-content/debug.log"] [unique_id "Z9X-wnMPtQ6iuT5_cV3DEgAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-15 20:07:25
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 15 16:07:18.955801 2025] [security2:error] [pid 211340:tid 211340] [client 209.87.169.167:34285] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bb103.us"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "Z9Xd9nYXsEcRacDI35AtgwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-15 17:56:47
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.87.169.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 15 13:56:39.917579 2025] [security2:error] [pid 20158:tid 20158] [client 209.87.169.167:5443] [client 209.87.169.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonegym.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "Z9W_V3DZwRYlJB9ZR73QXAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
