2025-08-24 17:22:44
(9 months ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
LRob.fr
2025-06-13 02:45:41
(1 year ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2025-05-29 07:04:40
(1 year ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2025-05-06 05:02:24
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 01:02:15.584720 2025] [security2:error] [pid 604762:tid 604762] [client 45.138.101.234:32151] [client 45.138.101.234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/Criterion Plus/Thumbs.db"] [unique_id "aBmX1zbqNQMCqyegHfdBMAAAABQ"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/Criterion%20Plus/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
polido
2025-03-30 20:43:14
(1 year ago)
Unauthorized connection attempt to port 443 from 45.138.101.234
Port Scan
🇺🇸
TPI-Abuse
2025-03-05 09:58:36
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 04:58:28.684773 2025] [security2:error] [pid 28782:tid 28782] [client 45.138.101.234:61127] [client 45.138.101.234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Steelcase/pics/STLC-674791/Thumbs.db"] [unique_id "Z8ggRNKZtBLznj3tzL7NCAAAAAE"], referer: https://vitalitywebb.com/backstore/Steelcase/pics/STLC-674791/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-12-01 08:33:46
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 01 03:33:40.302285 2024] [security2:error] [pid 3718595:tid 3718595] [client 45.138.101.234:63751] [client 45.138.101.234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hansen II/Pampa Rouge/Thumbs.db"] [unique_id "Z0wfZDUj-Vr5GQrJvjgv6gAAABI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hansen%20II/Pampa%20Rouge/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2024-11-02 21:15:06
(1 year ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2024-09-29 15:15:16
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
2024-08-06 01:06:04
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇦🇺
MAGIC
2024-06-09 19:00:45
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-05-23 23:46:57
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 45.138.101.234 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 23 19:46:53.839396 2024] [security2:error] [pid 18852] [client 45.138.101.234:44487] [client 45.138.101.234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".jpg - shortcut.lnk"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden_Technologies_PR535_MaxiComfort_Lift_Chair_Recliner_Anchor_Front.jpg - Shortcut.lnk"] [unique_id "Zk_Vbdqt45CSTLc-aBG8uQAAAAk"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
hostseries
2024-05-02 01:33:03
(2 years ago)
Trigger: LF_DISTATTACK
Brute-Force
🇬🇧
essinghigh
2024-05-01 08:19:55
(2 years ago)
1714551595 # Service_probe # SIGNATURE_SEND # source_ip:45.138.101.234 # dst_port:5607
...
Port Scan
2024-03-31 21:43:12
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH