🇺🇸
TPI-Abuse
2024-10-20 08:07:15
(1 year ago)
(mod_security) mod_security (id:217200) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com ...
show more
(mod_security) mod_security (id:217200) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 20 04:07:11.042771 2024] [security2:error] [pid 28621:tid 28621] [client 5.226.138.154:57752] [client 5.226.138.154] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||kln.ne.jp|F|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kln.ne.jp"] [uri "/"] [unique_id "ZxS6L6Mb2vixfqVFd2XE3QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-15 07:29:50
(1 year ago)
(mod_security) mod_security (id:217200) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com ...
show more
(mod_security) mod_security (id:217200) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 15 03:29:43.659513 2024] [security2:error] [pid 17626:tid 17868] [client 5.226.138.154:51920] [client 5.226.138.154] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||maxpowered.jp|F|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "maxpowered.jp"] [uri "/"] [unique_id "Zr2uZ6yQOXvrNerrXWTTSAAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paravroum.com
2024-08-02 07:00:57
(1 year ago)
Too much (>20) of invalid login attempts
Bad Web Bot
2024-08-02 01:50:18
(1 year ago)
Excessive HTTP/HTTPS connections.
Bad Web Bot
2024-07-30 11:10:42
(1 year ago)
Excessive HTTP/HTTPS connections.
Bad Web Bot
2024-07-29 03:53:36
(1 year ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH
🇺🇸
TPI-Abuse
2024-05-31 22:36:13
(2 years ago)
(mod_security) mod_security (id:217200) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com ...
show more
(mod_security) mod_security (id:217200) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 31 18:36:07.905713 2024] [security2:error] [pid 17835] [client 5.226.138.154:60967] [client 5.226.138.154] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||kln.ne.jp|F|2"] [data "/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "kln.ne.jp"] [uri "/"] [unique_id "ZlpQ1y8GVobq21jVL-U8egAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-17 07:21:47
(2 years ago)
(mod_security) mod_security (id:210350) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com ...
show more
(mod_security) mod_security (id:210350) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 17 03:21:39.681556 2024] [security2:error] [pid 13873] [client 5.226.138.154:56057] [client 5.226.138.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||desertdwellings.com|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "desertdwellings.com"] [uri "/"] [unique_id "ZfaaA4NB6jng9W825qx9KQAAAAY"], referer: desertdwellings.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-08 05:23:50
(2 years ago)
(mod_security) mod_security (id:210350) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com ...
show more
(mod_security) mod_security (id:210350) triggered by 5.226.138.154 (154.138.226.5.baremetal.zare.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 08 00:23:44.675730 2024] [security2:error] [pid 6224] [client 5.226.138.154:64013] [client 5.226.138.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||brauerfamily.org|F|4"] [data "keep-alive, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "brauerfamily.org"] [uri "/"] [unique_id "Zeqg4KGkhnuY-X_ggaF7CwAAAB0"], referer: brauerfamily.org
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
johnrdykstra.com
2022-05-01 04:23:47
(4 years ago)
SQL Injection
🇬🇧
Johann van der Walt
2022-01-09 02:05:29
(4 years ago)
SQL Injection Attempt
Hacking
SQL Injection
🇺🇸
fortypoundhead
2021-09-20 23:32:52
(4 years ago)
Gatekeeper - SQL injection attempt
SQL Injection
🇲🇾
syokadmin
2021-05-10 22:01:56
(5 years ago)
(mod_security) mod_security (id:949110) triggered by 5.226.138.154 (GB/United Kingdom/154.138.226.5. ...
show more
(mod_security) mod_security (id:949110) triggered by 5.226.138.154 (GB/United Kingdom/154.138.226.5.baremetal.zare.com): 1 in the last 3600 secs
show less
Brute-Force