🇺🇸
TPI-Abuse
2024-04-15 03:18:13
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 23:18:07.931645 2024] [security2:error] [pid 20947] [client 5.135.174.211:37564] [client 5.1 ...
show more
(mod_security) mod_security (id:210730) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 14 23:18:07.931645 2024] [security2:error] [pid 20947] [client 5.135.174.211:37564] [client 5.135.174.211] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||isitedigital.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "isitedigital.com"] [uri "/isi.sql"] [unique_id "Zhycb0dUPiEbH27Aw3tvlQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
sid3windr
2024-04-14 08:22:21
UTC ·
(2 years ago)
GET /.git/index (Tarpitted for 32s, wasted 1.99kB)
Web App Attack
🇧🇪
sid3windr
2024-04-14 08:22:21
UTC ·
(2 years ago)
GET /.env (Tarpitted for 32s, wasted 1.99kB)
Web App Attack
🇺🇸
TPI-Abuse
2024-04-12 15:39:40
UTC ·
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 12 11:39:36.886270 2024] [security2:error] [pid 25783] [client 5.135.174.211:44114] [client 5.1 ...
show more
(mod_security) mod_security (id:210492) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 12 11:39:36.886270 2024] [security2:error] [pid 25783] [client 5.135.174.211:44114] [client 5.135.174.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingdomwayinternational.org"] [uri "/wp-config.php.fr"] [unique_id "ZhlVuNIA6mbVv46G7vSk6QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-11 07:38:42
UTC ·
(2 years ago)
(mod_security) mod_security (id:210831) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 11 03:38:36.986081 2024] [security2:error] [pid 8106] [client 5.135.174.211:47740] [client 5.13 ...
show more
(mod_security) mod_security (id:210831) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 11 03:38:36.986081 2024] [security2:error] [pid 8106] [client 5.135.174.211:47740] [client 5.135.174.211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.mystudioinparis.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mystudioinparis.com"] [uri "/"] [unique_id "ZheTfIa0KswUdziKhDR_pAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-10 18:37:40
UTC ·
(2 years ago)
(mod_security) mod_security (id:210831) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 10 14:37:34.306231 2024] [security2:error] [pid 3020] [client 5.135.174.211:55622] [client 5.13 ...
show more
(mod_security) mod_security (id:210831) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 10 14:37:34.306231 2024] [security2:error] [pid 3020] [client 5.135.174.211:55622] [client 5.135.174.211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.ciptaconindotara.com|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ciptaconindotara.com"] [uri "/robots.txt"] [unique_id "ZhbcbptIij3phod9PkyNLQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
niceshops.com
2024-04-10 15:31:44
UTC ·
(2 years ago)
many POST-Requests ([10/Apr/2024:17:31:37.613] https://www.piccantino.be/fr-BE/newsletter/subscribe HTTP/2.0)
Web Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-04-09 03:55:17
UTC ·
(2 years ago)
(mod_security) mod_security (id:210831) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 08 23:55:13.472027 2024] [security2:error] [pid 3787:tid 46996449453824] [client 5.135.174.211: ...
show more
(mod_security) mod_security (id:210831) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 08 23:55:13.472027 2024] [security2:error] [pid 3787:tid 46996449453824] [client 5.135.174.211:35070] [client 5.135.174.211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.quetzalcoatl2012.net|F|4"] [data "panscient.com"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.quetzalcoatl2012.net"] [uri "/robots.txt"] [unique_id "ZhS8IVSGkL-XkOVzuWC01AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2024-04-09 02:10:39
UTC ·
(2 years ago)
(mod_security) mod_security (id:942360) triggered by 5.135.174.211 (FR/France/-): N in the last X secs
Web App Attack
🇨🇭
backslash
2024-04-08 07:17:35
UTC ·
(2 years ago)
Bad Web Bot
🇦🇺
MAGIC
2024-04-06 04:06:41
UTC ·
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇷🇺
sms.ru
2024-04-05 12:30:04
UTC ·
(2 years ago)
SMS pumping attack (request flood from TOR)
DDoS Attack
🇺🇸
TPI-Abuse
2024-04-05 08:51:15
UTC ·
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 05 04:51:07.900163 2024] [security2:error] [pid 12549] [client 5.135.174.211:49368] [client 5.1 ...
show more
(mod_security) mod_security (id:210730) triggered by 5.135.174.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 05 04:51:07.900163 2024] [security2:error] [pid 12549] [client 5.135.174.211:49368] [client 5.135.174.211] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||evolute.io|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "evolute.io"] [uri "/e.sql"] [unique_id "Zg-7ezaqbgLnkQBdFXj2WAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2024-04-05 04:39:44
UTC ·
(2 years ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack
🇦🇺
oncord
2024-04-04 15:24:03
UTC ·
(2 years ago)
Form spam
Web Spam