|
🇭🇺
bcsaba
|
|
Suricata: Alert - ET SCAN Exabot Webcrawler User Agent
|
Web App Attack
|
|
|
🇦🇺
MAGIC
|
|
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
|
🇩🇪
C C
|
|
Distributed proxy crawl wave (69 requests, 69 unique IPs, 31 ASNs in 55 sec); unauth. bot traffic w/ ...
show more
Distributed proxy crawl wave (69 requests, 69 unique IPs, 31 ASNs in 55 sec); unauth. bot traffic w/o verification; first observed at 2026-02-25T10:39:23+01:00
show less
|
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.57.82.122 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.57.82.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 23:48:37.010592 2026] [security2:error] [pid 10760:tid 10760] [client 31.57.82.122:48825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.nbcnewsradio.com"] [uri "/assets../.git/config"] [unique_id "aWsUpc2nI4CDFaoROSwTSQAAAB4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:211190) triggered by 31.57.82.122 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211190) triggered by 31.57.82.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:33:57.215493 2025] [security2:error] [pid 29977:tid 29981] [client 31.57.82.122:40125] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||www.kettlehill.net|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kettlehill.net"] [uri "/index.php"] [unique_id "aVLXpTWelXmsIDHwJWbZrgAAAYI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
| A web attack returned code 200 (success).
|
Hacking
SQL Injection
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:211190) triggered by 31.57.82.122 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211190) triggered by 31.57.82.122 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 13 07:02:35.319932 2025] [security2:error] [pid 25935:tid 25935] [client 31.57.82.122:56711] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||ftp.nbcnewsradio.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc%2Fpasswd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/index.php"] [unique_id "aRXI2_F5KXMTWmK2GIt2vwAAACI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
alibaba cloud ddos like web scan
|
Bad Web Bot
|
|
|
🇩🇪
botreporter
|
|
botnet ignoring robots.txt
|
Bad Web Bot
|
|
|
Anonymous
|
|
alibaba cloud ddos like web scan
|
Bad Web Bot
|
|
|
Anonymous
|
|
ignores robots.txt
|
Bad Web Bot
|
|
|
Anonymous
|
|
alibaba cloud ddos like web scan
|
Bad Web Bot
|
|
|
Anonymous
|
|
alibaba cloud ddos like web scan
|
Bad Web Bot
|
|
|
Anonymous
|
|
alibaba cloud ddos like web scan
|
Bad Web Bot
|
|
|
Anonymous
|
|
alibaba cloud ddos like web scan
|
Bad Web Bot
|
|