🇩🇪
nyuuzyou
2024-12-10 14:16:08
(1 year ago)
Intensive scraping: /web?s=Construction%20services%20California&country=tl-tl&scraper=brave. User-Ag ...
show more
Intensive scraping: /web?s=Construction%20services%20California&country=tl-tl&scraper=brave. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edge/44.18363.8131.
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2024-12-06 01:23:31
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 05 20:23:24.813179 2024] [security2:error] [pid 13028:tid 13044] [client 64.64.123.57:7787] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.fishrapper.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/backup/dump.sql"] [unique_id "Z1JSDMcJYyxp0k7BavExDAAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyuuzyou
2024-11-26 03:49:33
(1 year ago)
Intensive scraping: /web?s=Pathologist%20North%20Allis&country=ng-ng&scraper=mojeek. User-Agent: Moz ...
show more
Intensive scraping: /web?s=Pathologist%20North%20Allis&country=ng-ng&scraper=mojeek. User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51.
show less
Bad Web Bot
2024-11-25 18:55:10
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
🇺🇸
TPI-Abuse
2024-11-25 10:12:26
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 25 05:12:18.132047 2024] [security2:error] [pid 30679:tid 30679] [client 64.64.123.57:15371] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usbea.com"] [uri "/old/sftp-config.json"] [unique_id "Z0RNghQHk0A_KN6hf7blOQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇪
abusiveIntelligence
2024-11-24 02:10:00
(1 year ago)
RDP Local Account Slowly Brute-force Attempt
Brute-Force
🇦🇪
abusiveIntelligence
2024-11-23 23:40:00
(1 year ago)
RDP Local Account Slowly Brute-force Attempt
Brute-Force
🇺🇸
TPI-Abuse
2024-11-22 06:54:05
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 22 01:53:57.953927 2024] [security2:error] [pid 14844:tid 14844] [client 64.64.123.57:60689] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||trafficstopper.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "trafficstopper.com"] [uri "/bak/backup.sql"] [unique_id "Z0AqhWZOSxXHY5pAkYV-8gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-11-22 02:00:13
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 21 21:00:06.524636 2024] [security2:error] [pid 2304:tid 2304] [client 64.64.123.57:52669] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.enriquelaw.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.enriquelaw.com"] [uri "/backup/sql.sql"] [unique_id "Zz_lpp6nbmC-RZlRXbESCQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2024-11-15 13:56:02
(1 year ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2024-10-30 21:35:57
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 30 17:35:52.463222 2024] [security2:error] [pid 8625:tid 8625] [client 64.64.123.57:35431] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.pcga.golf|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pcga.golf"] [uri "/back/backup.sql"] [unique_id "ZyKmuCD09JWQh2h1o2qvqQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-30 21:14:23
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 30 17:14:16.311565 2024] [security2:error] [pid 10925:tid 10925] [client 64.64.123.57:52299] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.ixd.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ixd.net"] [uri "/backups/dump.sql"] [unique_id "ZyKhqHc08KZBRgiH9VDB9wAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-28 04:22:51
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 28 00:22:44.003367 2024] [security2:error] [pid 4455:tid 4459] [client 64.64.123.57:37905] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bluetigertees.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bluetigertees.com"] [uri "/back/www.sql"] [unique_id "Zx8RlNhYg7sYaN77An7FmQAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-20 18:03:57
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 20 14:03:53.002080 2024] [security2:error] [pid 12193:tid 12193] [client 64.64.123.57:56257] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isitel.com"] [uri "/back/sftp-config.json"] [unique_id "ZxVGCe1Zxk1W3NumaueKmQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-10-14 09:01:44
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 64.64.123.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 14 05:01:40.084556 2024] [security2:error] [pid 11817:tid 11817] [client 64.64.123.57:20499] [client 64.64.123.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||loriatrading.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "loriatrading.com"] [uri "/back/mysql.sql"] [unique_id "Zwzd9Cjn8HkT49d0JkNrHwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack