2024-08-22 18:05:41
(2 years ago)
wordpress-trap
Web App Attack
2024-08-19 04:28:35
(2 years ago)
wordpress-trap
Web App Attack
🇦🇺
MAGIC
2024-08-18 19:03:20
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
2024-08-18 17:17:43
(2 years ago)
wordpress-trap
Web App Attack
🇱🇺
HoneyPotEU02
2024-07-12 10:02:25
(2 years ago)
wordpress-trap
Web App Attack
🇳🇱
Linuxmalwarehuntingnl
2024-07-01 10:57:18
(2 years ago)
Unauthorized connection attempt
Brute-Force
🇪🇸
10dencehispahard SL
2024-06-28 06:07:04
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇨🇭
zynex
2024-06-28 05:47:30
(2 years ago)
URL Probing: /index.php
Web App Attack
🇦🇺
MAGIC
2024-06-28 05:01:56
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-06-11 09:09:03
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 11 05:08:58.868322 2024] [security2:error] [pid 152200] [client 79.137.221.174:42178] [client 79.137.221.174] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gurpreetkhaira.com|F|2"] [data ".com_acym.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gurpreetkhaira.com"] [uri "/language/en-GB/en-GB.com_acym.ini"] [unique_id "ZmgUKr2dJsRn7utYL6UV3AAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-06-11 06:10:52
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 11 02:10:45.074891 2024] [security2:error] [pid 474526] [client 79.137.221.174:59950] [client 79.137.221.174] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fabandco.com|F|2"] [data ".com_acym.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fabandco.com"] [uri "/language/en-GB/en-GB.com_acym.ini"] [unique_id "ZmfqZRWhyjwp4jW2xW7xmgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-06-11 04:02:42
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 11 00:02:38.254179 2024] [security2:error] [pid 20725] [client 79.137.221.174:58608] [client 79.137.221.174] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||agchurchkuwait.com|F|2"] [data ".com_acym.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "agchurchkuwait.com"] [uri "/language/en-GB/en-GB.com_acym.ini"] [unique_id "ZmfMXmJSVnn6u20yxc9D5QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-06-11 03:23:29
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 10 23:23:23.084299 2024] [security2:error] [pid 17346] [client 79.137.221.174:56716] [client 79.137.221.174] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ondakompun.com|F|2"] [data ".com_acym.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ondakompun.com"] [uri "/language/en-GB/en-GB.com_acym.ini"] [unique_id "ZmfDK65hKuLHVhUWGaO_uQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
rellik
2024-06-11 01:28:00
(2 years ago)
Scanning Critical File
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2024-06-10 23:22:13
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 79.137.221.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 10 19:22:08.302106 2024] [security2:error] [pid 29132] [client 79.137.221.174:46560] [client 79.137.221.174] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||terrybeachmusic.com|F|2"] [data ".com_acym.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "terrybeachmusic.com"] [uri "/language/en-GB/en-GB.com_acym.ini"] [unique_id "ZmeKoIbc5UnV3RRG2mshowAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack