|
🇮🇹
Progetto1
|
|
Website Scanning / Scraping
|
Bad Web Bot
Exploited Host
Web App Attack
|
|
|
🇮🇩
BPS-StatisticsIndonesia
|
|
WP Login Scan Activities
|
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
|
Bad Web Bot
|
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 45.148.125.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 45.148.125.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 19 21:08:04.927887 2024] [security2:error] [pid 23897:tid 23897] [client 45.148.125.55:45953] [client 45.148.125.55] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||butterfly-storm.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "butterfly-storm.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZxRX9EvkzX2Wl3NYCmKwnAAAABI"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Malicious activity detected
|
Hacking
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 45.148.125.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.148.125.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 19 05:03:07.631287 2024] [security2:error] [pid 8157] [client 45.148.125.55:20531] [client 45.148.125.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portalvasco.com|F|2"] [data ".lacasadelarcerojo.wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portalvasco.com"] [uri "/blog/2009/08/pere-navarro-el-\\xe2\\x80\\x9cfranco\\xe2\\x80\\x9d-de-las-carreteras\\xe2\\x80\\xa6/www.lacasadelarcerojo.wordpress.com"] [unique_id "ZiIzS6nDQjThfg1deYwVvgAAABI"], referer: https://portalvasco.com/blog/2009/08/pere-navarro-el-%e2%80%9cfranco%e2%80%9d-de-las-carreteras%e2%80%a6/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 45.148.125.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 45.148.125.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 04:58:00.307926 2024] [security2:error] [pid 22752] [client 45.148.125.55:19857] [client 45.148.125.55] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Churchill 4440/Thumbs.db"] [unique_id "ZhuamBGa6FoX4L1R3iFBkgAAABc"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Churchill%204440/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇭
backslash
|
|
honeypot
|
Bad Web Bot
|
|
|
🇨🇭
backslash
|
|
honeypot, robots.txt
|
Bad Web Bot
|
|