🇩🇪
kundukundu
2024-08-10 14:39:33
(2 years ago)
Web App Attack
🇺🇸
TPI-Abuse
2024-06-27 08:24:09
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 39.150.129.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 39.150.129.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 27 04:23:55.994882 2024] [security2:error] [pid 7834] [client 39.150.129.91:53482] [client 39.150.129.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||criticalthinkingbook.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "criticalthinkingbook.com"] [uri "/WS_FTP.LOG"] [unique_id "Zn0hm_4FHeRwK6wzj3QuKgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2024-06-26 05:04:17
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
RCS
2024-06-25 19:24:13
(2 years ago)
fail2ban apache-badbots
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-06-22 22:50:59
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 39.150.129.91 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 39.150.129.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 22 18:50:41.986043 2024] [security2:error] [pid 18264] [client 39.150.129.91:41112] [client 39.150.129.91] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pages4you.com|F|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pages4you.com"] [uri "/php.ini.ea3.bak"] [unique_id "ZndVQWpf18EfvX2zQyiPDQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2024-06-19 03:35:58
(2 years ago)
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:56 +1000] "GET /melbourne-cup-hampers/ ...
show more
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:56 +1000] "GET /melbourne-cup-hampers/ HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:56 +1000] "GET /melbourne-cup-hampers/ HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:56 +1000] "GET /melbourne-cup-hampers/ HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:57 +1000] "GET /melbourne-cup-hampers/ HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:57 +1000] "GET /melbourne-cup-hampers/ HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:57 +1000] "GET /melbourne-cup-hampers/ HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
winesbydesign.com.au:443 39.150.129.91 - - [19/Jun/2024:13:35:57 +1000] "GET /melbourne-cup-hampers/ HTTP/1.1" 403 620 "-" "Go-http-clie
...
show less
Web App Attack
🇦🇺
MAGIC
2024-06-17 01:00:50
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇦🇺
paulshipley.com.au
2024-06-14 20:40:16
(2 years ago)
embodiment.mareeshefford.com:443 39.150.129.91 - - [15/Jun/2024:06:40:14 +1000] "GET /wp-content/upl ...
show more
embodiment.mareeshefford.com:443 39.150.129.91 - - [15/Jun/2024:06:40:14 +1000] "GET /wp-content/uploads/2020/09/cropped-Embodiment-Coaching-logo.jpg HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
embodiment.mareeshefford.com:443 39.150.129.91 - - [15/Jun/2024:06:40:14 +1000] "GET /wp-content/uploads/2020/09/cropped-Embodiment-Coaching-logo.jpg HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
embodiment.mareeshefford.com:443 39.150.129.91 - - [15/Jun/2024:06:40:14 +1000] "GET /wp-content/uploads/2020/09/cropped-Embodiment-Coaching-logo.jpg HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
embodiment.mareeshefford.com:443 39.150.129.91 - - [15/Jun/2024:06:40:14 +1000] "GET /wp-content/uploads/2020/09/cropped-Embodiment-Coaching-logo.jpg HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
embodiment.mareeshefford.com:443 39.150.129.91 - - [15/Jun/2024:06:40:15 +1000] "GET /wp-content/uploads/2020/09/cropped-Embodiment-Coaching-logo.jpg HTTP/1.1" 403 620 "-" "Go-http-client/1.1"
embodiment.mareeshefford.com:443 39
...
show less
Web App Attack
🇳🇱
maxxsense
2024-06-13 15:04:03
(2 years ago)
(contact-abuse) Failed contact form abuse [redacted] 39.150.129.91 (CN/China/-)
Hacking
🇪🇸
10dencehispahard SL
2024-06-12 12:07:45
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇬🇧
conseilgouz
2024-06-12 02:19:56
(2 years ago)
saw-Joomla User : try to access forms...
Hacking
🇨🇭
backslash
2024-06-10 00:40:14
(2 years ago)
block ruleset 43A7B4C84F1C495B355A170A3ABE0D75374A5E0D
Bad Web Bot
2024-06-09 12:58:25
(2 years ago)
39.150.129.91 (CN/China/-), more than 20 Apache 403 hits in the last 3600 secs; Ports: 80,443; Direc ...
show more
39.150.129.91 (CN/China/-), more than 20 Apache 403 hits in the last 3600 secs; Ports: 80,443; Direction: in; Trigger: LF_APACHE_403; Logs:
show less
Port Scan
🇺🇸
mnsf
2024-06-08 11:03:40
(2 years ago)
Request Overload (104)
Brute-Force
Web App Attack