🇺🇸
aygabtu
2024-08-14 16:32:00
(2 years ago)
multiple sql injection attacks
SQL Injection
2024-08-05 10:30:06
(2 years ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Hacking
SQL Injection
Web App Attack
🇬🇧
Aetherweb Ark
2024-08-05 09:23:21
(2 years ago)
(mod_security) mod_security (id:211190) triggered by 64.71.190.34 (US/United States/-): N in the las ...
show more
(mod_security) mod_security (id:211190) triggered by 64.71.190.34 (US/United States/-): N in the last X secs
show less
Web App Attack
🇿🇦
maximonline.co.za
2024-08-05 08:38:08
(2 years ago)
Attempts at SQL injection.
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2024-08-04 08:48:49
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 04 04:48:41.342104 2024] [security2:error] [pid 28161:tid 28257] [client 64.71.190.34:56570] [client 64.71.190.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||unitedonegroup.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?route=\\x22><script>alert(string.fromcharcode(88,83,83))</script>&path=93"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "unitedonegroup.com"] [uri "/index.php"] [unique_id "Zq9AaZAi2CMDB6eY_XM8TAAAARE"], referer: https://unitedonegroup.com/index.php?route="><script >alert(String.fromCharCode(88,83,83))</script>&path=93
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-04 05:24:52
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 04 01:24:48.900451 2024] [security2:error] [pid 736:tid 736] [client 64.71.190.34:55713] [client 64.71.190.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.goopyboo.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?page=\\x22><script>alert(string.fromcharcode(88,83,83))</script>&id=6003"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.goopyboo.com"] [uri "/index.php"] [unique_id "Zq8QoNtvbwh2R4pF1URb9wAAAAI"], referer: https://www.goopyboo.com/index.php?page="><script >alert(String.fromCharCode(88,83,83))</script>&id=6003
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-04 04:38:44
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 04 00:38:37.414605 2024] [security2:error] [pid 6265:tid 6265] [client 64.71.190.34:55988] [client 64.71.190.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.oualierealty.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?action=\\x22><script>alert(string.fromcharcode(88,83,83))</script>&id=610"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.oualierealty.com"] [uri "/index.php"] [unique_id "Zq8Fzed9tFcuuioCKUF44wAAAAU"], referer: https://www.oualierealty.com/index.php?action="><script >alert(String.fromCharCode(88,83,83))</script>&id=610
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
[email protected]
2024-08-04 04:37:47
(2 years ago)
SQL Injection
🇺🇸
TPI-Abuse
2024-08-04 04:11:31
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:212620) triggered by 64.71.190.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 04 00:11:23.095779 2024] [security2:error] [pid 7448:tid 7448] [client 64.71.190.34:52699] [client 64.71.190.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.jwwsb.org|F|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?option=\\x22><script>alert(string.fromcharcode(88,83,83))</script>&view=article&id=20&itemid=152"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.jwwsb.org"] [uri "/index.php"] [unique_id "Zq7_a_lD6arfEfQrzkOAWQAAAAU"], referer: https://www.jwwsb.org/index.php?option="><script >alert(String.fromCharCode(88,83,83))</script>&view=article&id=20&Itemid=152
show less
Brute-Force
Bad Web Bot
Web App Attack