🇸🇮
borisperc
2025-08-03 10:36:24
(10 months ago)
Web Spam
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
AvonleaConsulting
2025-04-26 22:49:36
(1 year ago)
Brute force attack stopped by firewall
Web Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-08 14:59:46
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 08 09:59:40.255618 2025] [security2:error] [pid 1505356:tid 1505356] [client 23.154.177.19:22174] [client 23.154.177.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pushingbubbles.com"] [uri "/wp-config.php.save.7"] [unique_id "Z8xbXDQi1AE6oRxf9rHX2QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-03 22:30:06
(1 year ago)
(mod_security) mod_security (id:210801) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210801) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 03 17:29:59.513330 2025] [security2:error] [pid 8807:tid 8807] [client 23.154.177.19:62292] [client 23.154.177.19] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "nessus" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||test.nationalccl.com|F|2"] [data "nessus soap v0.0.1 (nessus.org)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "test.nationalccl.com"] [uri "/sdk"] [unique_id "Z8YtZ4VQFzUf1gxSX9-B3gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Carsten
2025-02-22 18:20:25
(1 year ago)
port scan with outdated browser [chrome/83.]
Port Scan
🇩🇪
LRob.fr
2025-02-16 11:00:21
(1 year ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2025-02-15 23:03:00
(1 year ago)
DDoS Attack Layer 7 SilentBot
DDoS Attack
🇩🇪
niceshops.com
2025-02-05 09:11:45
(1 year ago)
Web Attack multi (Feb 25 10:11:45 Matching rules: Detect possible SQL injection - E.g. Sleep(5) )
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-01-19 06:03:17
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
oncord
2025-01-19 06:01:15
(1 year ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-01-18 15:19:24
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 18 10:19:21.074525 2025] [security2:error] [pid 26569:tid 26569] [client 23.154.177.19:56978] [client 23.154.177.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baliaccommodationpadangpadang.com"] [uri "/wp-config.php.org"] [unique_id "Z4vGeYYs5btDUx7BidMzngAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-15 14:28:58
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 15 09:28:53.054352 2025] [security2:error] [pid 9653:tid 9653] [client 23.154.177.19:62382] [client 23.154.177.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigheartskitchen.net"] [uri "/wp-config.php_oldd"] [unique_id "Z4fGJYVugNUmw-JDCABI9QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
oncord
2025-01-07 12:17:17
(1 year ago)
Form spam
Web Spam
2025-01-06 00:18:50
(1 year ago)
pixelfritteuse.de 23.154.177.19 [06/Jan/2025:01:18:50 +0100] "POST /wp-login.php HTTP/1.1" 200 5228 ...
show more
pixelfritteuse.de 23.154.177.19 [06/Jan/2025:01:18:50 +0100] "POST /wp-login.php HTTP/1.1" 200 5228 "https://pixelfritteuse.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36"
pixelfritteuse.de 23.154.177.19 [06/Jan/2025:01:18:50 +0100] "POST /wp-login.php HTTP/1.1" 200 5226 "https://pixelfritteuse.de" "Mozilla/5.0 (Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
show less
Web App Attack
🇩🇪
David Ferneding
2025-01-03 16:50:09
(1 year ago)
Part of large-scale ddos-attack, 152264 requests from this ip
DDoS Attack