2024-12-12 06:40:08
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇩🇪
nyuuzyou
2024-12-10 14:19:05
(1 year ago)
Intensive scraping: /web?s=Construction%20services%20California&country=lt-lt&scraper=ddg. User-Agen ...
show more
Intensive scraping: /web?s=Construction%20services%20California&country=lt-lt&scraper=ddg. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36.
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2024-12-06 01:23:30
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 20:23:22.839273 2024] [security2:error] [pid 14025:tid 14193] [client 64.64.123.56:30715] [client 64.64.123.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fishrapper.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/restore/backup.sql"] [unique_id "Z1JSCnWCOI9kIk3GYRCoVQAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-12-04 12:55:10
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2024-12-01 12:55:09
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2024-11-28 12:50:11
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇩🇪
nyuuzyou
2024-11-26 03:49:12
(1 year ago)
Intensive scraping: /web?s=%22Retail%20stores%20in%20Utah%22&country=ch-ch&scraper=yep. User-Agent: ...
show more
Intensive scraping: /web?s=%22Retail%20stores%20in%20Utah%22&country=ch-ch&scraper=yep. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51.
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2024-11-25 10:12:26
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 25 05:12:18.499783 2024] [security2:error] [pid 1957:tid 1957] [client 64.64.123.56:51893] [client 64.64.123.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||usbea.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "usbea.com"] [uri "/bak/mysql.sql"] [unique_id "Z0RNgrufs_eSh05d7QSoRQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-11-23 18:10:13
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇺🇸
TPI-Abuse
2024-11-23 01:56:43
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 22 20:56:39.292874 2024] [security2:error] [pid 3916514:tid 3916514] [client 64.64.123.56:18105] [client 64.64.123.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||boat-accessories.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "boat-accessories.net"] [uri "/backups/backup.sql"] [unique_id "Z0E2V4-ZwjD4oMiRw-S-bAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-22 12:37:47
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 22 07:37:39.786641 2024] [security2:error] [pid 7972:tid 7972] [client 64.64.123.56:37533] [client 64.64.123.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isitel.com"] [uri "/backup/sftp-config.json"] [unique_id "Z0B7E_uhQs-o79U9U8aIxQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-22 06:10:51
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 22 01:10:46.639513 2024] [security2:error] [pid 16077:tid 16077] [client 64.64.123.56:13077] [client 64.64.123.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.enriquelaw.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.enriquelaw.com"] [uri "/backups/sql.sql"] [unique_id "Z0AgZtE9VTvsd6RXNoRsvQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇪
abusiveIntelligence
2024-11-21 04:10:00
(1 year ago)
RDP Local Account Slowly Brute-force Attempt
Brute-Force
🇦🇹
CTK
2024-11-21 04:08:20
(1 year ago)
Customer Site (Grieskirchen FP)
Brute-Force
🇬🇧
pestctrl
2024-11-06 21:00:48
(1 year ago)
Form spam
Phishing
Web Spam