๐บ๐ธ
TPI-Abuse
2024-02-28 06:09:02
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 28 01:08:56.872368 2024] [security2:error] [pid 30962] [client 62.146.234.82:50561] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||elpasoheroes.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elpasoheroes.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Zd7N-NjU0hOJZWBhFtOZhwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-27 23:37:45
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 18:37:41.368231 2024] [security2:error] [pid 27348] [client 62.146.234.82:52478] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||polar-design.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "polar-design.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Zd5yRaKsvhj_fH6YIlwSpgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ps-center
2024-02-27 23:37:20
(2 years ago)
ENG: Web Attack GET /wp-admin/css/colors/blue/CasperExV1.php GET /wp-content/index.php
Web Spam
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2024-02-27 19:05:14
(2 years ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-27 19:00:22
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 14:00:17.968089 2024] [security2:error] [pid 13313] [client 62.146.234.82:61746] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||natursac.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "natursac.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Zd4xQYOYg0HJ2di7Wj2LfAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2024-02-27 16:04:34
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-27 05:09:45
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 27 00:09:38.969318 2024] [security2:error] [pid 26910:tid 47426302023424] [client 62.146.234.82:65267] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||debbieeverett.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "debbieeverett.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Zd1uku0Z1QfZcXSF1MxBoQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-27 01:53:39
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 26 20:53:32.266460 2024] [security2:error] [pid 16211] [client 62.146.234.82:63393] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||memorable2022.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "memorable2022.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Zd1AnJrdrLfpGs3PMMDiVwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
Mediashaker
2024-02-26 22:06:42
(2 years ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 62.146.234.82 (DE/German ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 62.146.234.82 (DE/Germany/vmi12333.fybeservers.com)
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2024-02-26 14:16:47
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 26 09:16:41.319990 2024] [security2:error] [pid 19429] [client 62.146.234.82:60699] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||gold-au.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gold-au.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZdydSal7jUfebSA2pnXntwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2024-02-26 09:58:37
(2 years ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2024-02-26 07:27:12
(2 years ago)
LF_APACHE_403: 62.146.234.82 (DE/Germany/vmi12333.fybeservers.com), more than 10 Apache 403 hits in ...
show more
LF_APACHE_403: 62.146.234.82 (DE/Germany/vmi12333.fybeservers.com), more than 10 Apache 403 hits in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-26 07:09:44
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 26 02:09:41.049406 2024] [security2:error] [pid 28439] [client 62.146.234.82:49789] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||g3newmedia.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "g3newmedia.com"] [uri "/site/default/settings.php.BAK"] [unique_id "Zdw5NeKetieczPvaaT8k8QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-26 01:45:43
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 25 20:45:37.349309 2024] [security2:error] [pid 19054] [client 62.146.234.82:54315] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||davidwoodard.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "davidwoodard.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZdvtQet52x3-i4-BcOoBSgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-02-26 00:47:30
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in ...
show more
(mod_security) mod_security (id:210730) triggered by 62.146.234.82 (vmi12333.fybeservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 25 19:47:24.722046 2024] [security2:error] [pid 666] [client 62.146.234.82:59824] [client 62.146.234.82] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||chickiesbeef.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chickiesbeef.com"] [uri "/site/default/settings.php.BAK"] [unique_id "ZdvfnG2Qz40vgNxekl8zYwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack