๐บ๐ธ
TPI-Abuse
2024-07-30 12:11:19
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 08:11:15.205695 2024] [security2:error] [pid 8824:tid 8824] [client 2a0b:f4c2:2::55:40549] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.finishlineenterprisesllc.com"] [uri "/.git/config"] [unique_id "ZqjYY1BlFaW_Sc-e55koTQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-30 06:14:18
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 30 02:14:10.500823 2024] [security2:error] [pid 22316:tid 22316] [client 2a0b:f4c2:2::55:34065] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.ozkanturker.com"] [uri "/.git/config"] [unique_id "ZqiEslpCR6sUAVyZEttgWwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-23 09:59:22
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 23 05:59:14.977387 2024] [security2:error] [pid 26527:tid 26527] [client 2a0b:f4c2:2::55:6107] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.midway-island.com"] [uri "/.git/config"] [unique_id "Zp9-8qFIX3V01WS5mWtOegAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-22 16:57:06
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 22 12:57:01.496341 2024] [security2:error] [pid 24290:tid 24290] [client 2a0b:f4c2:2::55:33013] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.slattery-law.com"] [uri "/.git/config"] [unique_id "Zp6PXY2fX2Kve7p1Kzs-VQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-04 09:37:43
(2 years ago)
(mod_security) mod_security (id:210831) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210831) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 04 05:37:36.694533 2024] [security2:error] [pid 26646] [client 2a0b:f4c2:2::55:20071] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.deltad.net|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.deltad.net"] [uri "/"] [unique_id "ZoZtYHch66Pn2IvCuwqYkQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-06-30 00:43:30
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 29 20:43:22.174527 2024] [security2:error] [pid 32655] [client 2a0b:f4c2:2::55:8675] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||marjosse.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "marjosse.com"] [uri "/backup-2023.sql"] [unique_id "ZoCqKl-oNOOwYPx6vyAOswAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Bensay
2024-06-16 15:50:28
(2 years ago)
2a0b:f4c2:2::55 - - [16/Jun/2024:17:50:21 +0200] "GET /wp-config.phpc HTTP/1.1" 404 440 "-" "Mozilla ...
show more
2a0b:f4c2:2::55 - - [16/Jun/2024:17:50:21 +0200] "GET /wp-config.phpc HTTP/1.1" 404 440 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)"
2a0b:f4c2:2::55 - - [16/Jun/2024:17:50:23 +0200] "GET /wp-config%20 HTTP/1.1" 404 440 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)"
2a0b:f4c2:2::55 - - [16/Jun/2024:17:50:24 +0200] "GET /wp-config.php-n HTTP/1.1" 404 440 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)"
2a0b:f4c2:2::55 - - [16/Jun/2024:17:50:25 +0200] "GET /wp-config.phpnew HTTP/1.1" 404 440 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)"
2a0b:f4c2:2::55 - - [16/Jun/2024:17:50:27 +0200] "GET /wp-config.cfg HTTP/1.1" 404 440 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)"
...
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-06-05 00:51:17
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 04 20:51:12.226477 2024] [security2:error] [pid 27337] [client 2a0b:f4c2:2::55:3411] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gasoilliquidsdaily.com"] [uri "/wp-config.phpe"] [unique_id "Zl-2gLCAlBWOz5LvYke3kAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 14:37:42
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 10:37:35.803079 2024] [security2:error] [pid 24018] [client 2a0b:f4c2:2::55:41247] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.arsndetx.com"] [uri "/.git/config"] [unique_id "ZfxGL4GbjCOlEefchviT3QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 10:31:20
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 06:31:15.704167 2024] [security2:error] [pid 15951] [client 2a0b:f4c2:2::55:14833] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.lancervaletllc.com"] [uri "/.git/config"] [unique_id "ZfwMc4az0FzklXqSZTqzggAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 09:54:29
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:54:25.405236 2024] [security2:error] [pid 21338] [client 2a0b:f4c2:2::55:35665] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.dianogah.com"] [uri "/.git/config"] [unique_id "ZfwD0Zuy32H4AAp59ZW3rAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 08:30:51
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 04:30:46.341562 2024] [security2:error] [pid 19514] [client 2a0b:f4c2:2::55:17231] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.srtmanagementservices.com"] [uri "/.git/config"] [unique_id "ZfvwNjLfY3DD2sZ3gZuBlwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-16 22:55:16
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 16 18:55:12.322704 2024] [security2:error] [pid 2015] [client 2a0b:f4c2:2::55:24859] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.leonardodecaprio.com"] [uri "/.git/config"] [unique_id "ZfYjUEAfG_hUHxOKudAjNQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-13 21:34:51
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2:2::55 (tor-exit-55.for-privacy.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 17:34:45.451173 2024] [security2:error] [pid 26884] [client 2a0b:f4c2:2::55:56437] [client 2a0b:f4c2:2::55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.garretthillary.com"] [uri "/.git/config"] [unique_id "ZfIb9YKBnGR0AG7fnTieygAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
zeitschel.net
2023-11-22 18:14:44
(2 years ago)
2023-11-22 19:14:37 Unauthorized /owa/auth.owa
Hacking
Web App Attack