🇺🇸
TPI-Abuse
2024-03-10 19:30:52
UTC ·
(2 years ago)
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 10 15:30:45.065384 2024] [security2:error] [pid 5536] [cli ...
show more
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 10 15:30:45.065384 2024] [security2:error] [pid 5536] [client 35.241.135.72:54288] [client 35.241.135.72] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.sutherlandyogastudio.com|F|4"] [data "REQUEST_URI=/wp-content/plugins/easy-facebook-likebox/public/assets/popup/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.sutherlandyogastudio.com"] [uri "/wp-content/plugins/easy-facebook-likebox/public/assets/popup/%url%"] [unique_id "Ze4KZVPT2KgTLynf81g4twAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-10 11:15:15
UTC ·
(2 years ago)
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 10 07:15:03.792705 2024] [security2:error] [pid 12077] [cl ...
show more
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 10 07:15:03.792705 2024] [security2:error] [pid 12077] [client 35.241.135.72:56338] [client 35.241.135.72] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.justfusion.com|F|4"] [data "REQUEST_URI=/catalog/view/theme/journal2/lib/magnific-popup/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.justfusion.com"] [uri "/catalog/view/theme/journal2/lib/magnific-popup/%url%"] [unique_id "Ze2WNwqX3nGklVRKqGaTAwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-08 04:14:08
UTC ·
(2 years ago)
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 07 23:14:04.187751 2024] [security2:error] [pid 15090] [cl ...
show more
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 07 23:14:04.187751 2024] [security2:error] [pid 15090] [client 35.241.135.72:40964] [client 35.241.135.72] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||www.ritterlien.com|F|4"] [data "REQUEST_URI=/wp-content/themes/rittertheme/js/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ritterlien.com"] [uri "/wp-content/themes/rittertheme/js/%url%"] [unique_id "ZeqQjGA4g8lgpd2HMiAvHQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2024-03-06 01:59:00
UTC ·
(2 years ago)
File vulnerability probing. Excessive crawling.
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2024-03-05 13:24:59
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇪🇸
10dencehispahard SL
2024-03-04 06:02:31
UTC ·
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇺🇸
TPI-Abuse
2024-03-02 21:23:46
UTC ·
(2 years ago)
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 02 16:23:41.087560 2024] [security2:error] [pid 11416] [cl ...
show more
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 02 16:23:41.087560 2024] [security2:error] [pid 11416] [client 35.241.135.72:55604] [client 35.241.135.72] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||alexetjeremy.com|F|4"] [data "REQUEST_URI=/vendor/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "alexetjeremy.com"] [uri "/vendor/%url%"] [unique_id "ZeOY3W442vWbSvMMGCf7tAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2024-02-28 14:12:47
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
MAGIC
2024-02-27 08:07:15
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-02-26 05:25:28
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 26 00:25:21.018668 2024] [security2:error] [pid 18290] [cl ...
show more
(mod_security) mod_security (id:210730) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 26 00:25:21.018668 2024] [security2:error] [pid 18290] [client 35.241.135.72:44568] [client 35.241.135.72] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||phantomquailkennel.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "phantomquailkennel.com"] [uri "/paypal.com"] [unique_id "Zdwgwe4Qn1ywVh94vasiJwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2024-02-25 22:14:11
UTC ·
(2 years ago)
Blocking for trying to access an exploit file: /install.php
Hacking
🇳🇱
vestibtech
2024-02-24 09:16:07
UTC ·
(2 years ago)
35.241.135.72 - - [24/Feb/2024:02:16:06 -0700] "GET /util/login.aspx HTTP/1.1" 301 503 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:52.0) Gecko/20100101 Firefox/52.0"
...
Web App Attack
🇺🇸
TPI-Abuse
2024-02-23 09:29:24
UTC ·
(2 years ago)
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 23 04:29:19.193029 2024] [security2:error] [pid 13763] [cl ...
show more
(mod_security) mod_security (id:210381) triggered by 35.241.135.72 (72.135.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 23 04:29:19.193029 2024] [security2:error] [pid 13763] [client 35.241.135.72:36218] [client 35.241.135.72] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt||semisysteme.com|F|4"] [data "REQUEST_URI=/wp-content/themes/borrow/js/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "semisysteme.com"] [uri "/wp-content/themes/borrow/js/%url%"] [unique_id "Zdhlb6L0Bz2Q3bYF9PAkogAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2024-02-20 08:02:15
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇳🇱
MickHoff
2024-02-19 18:42:00
UTC ·
(2 years ago)
"AH01071: Got error 'Primary script unknown'"
Web App Attack