๐บ๐ธ
TPI-Abuse
2024-05-14 23:34:32
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210730) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 14 19:34:28.528659 2024] [security2:error] [pid 2902] [client 2a0b:f4c2::22:19712] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||letmespeakpodcast.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "letmespeakpodcast.com"] [uri "/letmespeakpodcast.sql"] [unique_id "ZkP1BCULKotxeBrRZKyqAwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
MarkGGN
2024-04-26 02:14:28
(2 years ago)
Wordpress related. [1714097339] [0] [*] [#4289055] [0] [2] [2a0b:f4c2::22] [403] [GET] [/index.php] ...
show more
Wordpress related. [1714097339] [0] [*] [#4289055] [0] [2] [2a0b:f4c2::22] [403] [GET] [/index.php] [WordPress: Blocked access to the WP REST API] [hex:2f77702d6a736f6e2f6f656d6265642f312e302f656d6265643f75726c3d2f6963682f]
[1714097667] [0] [*] [#7552924] [0] [2] [2a0b:f4c2::22] [403] [GET] [/index.php] [WordPress: Blocked access to the WP REST API] [hex:2f77702d6a736f6e2f6f656d6265642f312e302f656d6265643f75726c3d2f6472656974617573656e642d66756e64652f26]
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 12:55:54
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 08:55:48.570051 2024] [security2:error] [pid 13647] [client 2a0b:f4c2::22:62532] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.robhoward.me"] [uri "/.git/config"] [unique_id "ZfwuVBXcU3NiQGag5-ZHMwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 09:58:34
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:58:27.191000 2024] [security2:error] [pid 16310] [client 2a0b:f4c2::22:24634] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.fiasdesigns.com"] [uri "/.git/config"] [unique_id "ZfwEw8umJsi8s9QbQ4zbPgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 09:42:51
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:42:44.667973 2024] [security2:error] [pid 24366] [client 2a0b:f4c2::22:36216] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.acupressbooks.com"] [uri "/.git/config"] [unique_id "ZfwBFP0hxCeuKVzkOdmqZQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 09:21:50
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:21:42.955199 2024] [security2:error] [pid 3101828:tid 47759613908736] [client 2a0b:f4c2::22:37858] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.kd9uri.com"] [uri "/.git/config"] [unique_id "Zfv8JlW-ENp-ygENHYGfBAAAAgs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 08:31:07
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 04:31:03.901264 2024] [security2:error] [pid 20417] [client 2a0b:f4c2::22:12274] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.laraluna.com"] [uri "/.git/config"] [unique_id "ZfvwRyZO_ICuWi-rVmzJgQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-21 08:03:36
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 04:03:29.962821 2024] [security2:error] [pid 2759] [client 2a0b:f4c2::22:51210] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.sponsorzilla.com"] [uri "/.git/config"] [unique_id "Zfvp0Qa1hztEnlZ-SqJyogAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-13 21:41:28
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 17:41:24.609905 2024] [security2:error] [pid 30393] [client 2a0b:f4c2::22:5730] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.diegogamazo.com"] [uri "/.git/config"] [unique_id "ZfIdhEVol9rO4joT8YW88gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-13 21:03:10
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 17:03:02.630518 2024] [security2:error] [pid 22939] [client 2a0b:f4c2::22:55702] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.visiontours.com"] [uri "/.git/config"] [unique_id "ZfIUhiTkvIQMeASpi1s_0wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-13 20:46:41
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org) ...
show more
(mod_security) mod_security (id:210492) triggered by 2a0b:f4c2::22 (berlin01.tor-exit.artikel10.org): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 16:46:34.525556 2024] [security2:error] [pid 32622:tid 47322736191232] [client 2a0b:f4c2::22:35520] [client 2a0b:f4c2::22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.pamper.com"] [uri "/.git/config"] [unique_id "ZfIQqrf5GzqpFBfuAQ8UXgAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
chronos
2023-11-12 22:30:41
(2 years ago)
[[12/11/2023 - 19:30:40 -03:00 UTC]
Attack from [2a0b:f4c2::22][berlin01.tor-exit.artikel10.org]
Ac ...
show more
[[12/11/2023 - 19:30:40 -03:00 UTC]
Attack from [2a0b:f4c2::22][berlin01.tor-exit.artikel10.org]
Action: BLocKed
Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing.
]
...
show less
Bad Web Bot
๐บ๐ธ
chronos
2023-11-12 22:30:20
(2 years ago)
[[12/11/2023 - 19:30:19 -03:00 UTC]
Attack from [2a0b:f4c2::22][berlin01.tor-exit.artikel10.org]
Ac ...
show more
[[12/11/2023 - 19:30:19 -03:00 UTC]
Attack from [2a0b:f4c2::22][berlin01.tor-exit.artikel10.org]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other]
...
show less
Hacking
Web App Attack
๐บ๐ธ
beehivesafety
2023-10-17 10:28:43
(2 years ago)
Threat Blocked by BeeHive from (ASN:60729) (Network:ZWIEBELFREUN) (Host:knowledgebase.beehive.system ...
show more
Threat Blocked by BeeHive from (ASN:60729) (Network:ZWIEBELFREUN) (Host:knowledgebase.beehive.systems) (Method:GET) (Protocol:HTTP/2) (Timestamp:2023-10-17T02:16:56Z)
show less
Open Proxy
VPN IP
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
chronos
2023-10-11 10:18:59
(3 years ago)
[[11/10/2023 - 07:18:57 -03:00 UTC]
Attack from [2a0b:f4c2::22][berlin01.tor-exit.artikel10.org]
Ac ...
show more
[[11/10/2023 - 07:18:57 -03:00 UTC]
Attack from [2a0b:f4c2::22][berlin01.tor-exit.artikel10.org]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other]
...
show less
Hacking
Web App Attack