|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210831) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210831) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 12 12:34:13.401637 2025] [security2:error] [pid 29151:tid 29151] [client 213.108.1.52:52765] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||backstore.com|F|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/webalizer/usage_202508.html"] [unique_id "aJttBScPYy7TAnALukZBxQAAABs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
|
Bad Web Bot
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 00:54:21.498888 2025] [security2:error] [pid 594104:tid 594104] [client 213.108.1.52:56465] [client 213.108.1.52] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Addison/Thumbs.db"] [unique_id "aBmV_Vnuj5BtcvIH-0kGOgAAABs"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Addison/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 213.108.1.52
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 213.108.1.52
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 213.108.1.52
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
Anonymous
|
|
Brute force attack detected from 213.108.1.52
|
DDoS Attack
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 10 17:10:15.136089 2024] [security2:error] [pid 2553945:tid 2553945] [client 213.108.1.52:11233] [client 213.108.1.52] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Danbury II/Danbury II/Stetson Coffee/originals/Thumbs.db"] [unique_id "ZzEvR_Ar2p97I9aqF8VKZAAAAAw"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Danbury%20II/Danbury%20II/Stetson%20Coffee/originals/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
This IP was involved in an brute force and password spray attack on 2024/10/09 17:41:21
|
Port Scan
Brute-Force
Exploited Host
Web App Attack
|
|
|
🇷🇺
sms.ru
|
|
SMS pumping attack from foreign country
|
DDoS Attack
|
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
|
🇷🇸
Smel
|
|
HTTP/80/443/8080 Unauthorized Probe, Hack -
|
Hacking
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 213.108.1.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 13:55:09.513567 2024] [security2:error] [pid 16845:tid 16845] [client 213.108.1.52:28501] [client 213.108.1.52] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Ashton II Recliner/Havana Brown/originals/Thumbs.db"] [unique_id "ZrO0_TRduwD_F3q1D5JFdwAAAAo"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Ashton%20II%20Recliner/Havana%20Brown/originals/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
|
Bad Web Bot
|
|
|
🇨🇭
backslash
|
|
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
|
Bad Web Bot
|
|