🇳🇱
mawan
2025-09-19 12:50:15
(1 year ago)
Suspected of having performed illicit activity on AMS server.
Web App Attack
🇬🇧
openstrike.co.uk
2024-08-23 05:12:35
(2 years ago)
4 attacks on Javascript arg injection:
GET /keyword.cgi?id=%3Ciframe+src%3D%27javascript%3Aalert%28% ...
show more
4 attacks on Javascript arg injection:
GET /keyword.cgi?id=%3Ciframe+src%3D%27javascript%3Aalert%28%22XSS%22%29%27%3E%3C%2Fiframe%3E HTTP/1.1
show less
Hacking
🇺🇸
aygabtu
2024-08-23 00:52:00
(2 years ago)
numerous sql injection attacks
SQL Injection
🇺🇸
TPI-Abuse
2024-08-23 00:37:02
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 20:36:57.897530 2024] [security2:error] [pid 19018:tid 19018] [client 83.147.54.111:57189] [client 83.147.54.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||anatoliana.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /store/index.php?main_page=<script>alert('xss')</script>&products_id=5882"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "anatoliana.com"] [uri "/store/index.php"] [unique_id "ZsfZqQVo6Awg6bJfXsjjpgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
rafamiga
2024-08-22 23:44:00
(2 years ago)
83.147.54.111:53136 [22/Aug/2024:23:44:31.090] in~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC 49/49/0/0 ...
show more
83.147.54.111:53136 [22/Aug/2024:23:44:31.090] in~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC 49/49/0/0/0 {US|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36} "GET https://*.pl/news.php?rowstart=%3Cimg+src%3D%27x%27+onerror%3D%27alert%28%22XSS%22%29%27%2F%3E HTTP/2.0"
83.147.54.111:54556 [22/Aug/2024:23:44:31.441] in~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC 51/51/0/0/0 {US|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36} "GET https://*.pl/news.php?rowstart=%3Csvg+onload%3D%27alert%28%22XSS%22%29%27%2F%3E HTTP/2.0"
83.147.54.111:12180 [22/Aug/2024:23:44:31.803] in~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC 52/52/0/0/0 {US|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36} "GET https://*.pl/news.php?rowstart=%3Cbody+onload%3Dalert%28%27XSS%27%29%3E HTTP/2.0"
show less
Port Scan
SQL Injection
Brute-Force
🇺🇸
TPI-Abuse
2024-08-22 22:22:34
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 18:22:27.614071 2024] [security2:error] [pid 32343:tid 32343] [client 83.147.54.111:57285] [client 83.147.54.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.susanoneill.us|F|2"] [data "Matched Data: <script found within REQUEST_URI: /?page_id=<script>alert('xss')</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.susanoneill.us"] [uri "/"] [unique_id "Zse6Iwmst9uGJwffIIb0CwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
fortypoundhead
2024-08-22 21:54:58
(2 years ago)
SQL Injection Attempt
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2024-08-22 21:52:27
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 17:52:21.352441 2024] [security2:error] [pid 18386:tid 18386] [client 83.147.54.111:50952] [client 83.147.54.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "3"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.thegoldentether.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /board/viewtopic.php?start=<script>alert('xss')</script>&t=15593"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.thegoldentether.com"] [uri "/board/viewtopic.php"] [unique_id "ZsezFW1UOZ3yf24B3ZdAIgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-22 21:35:29
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 17:35:25.038554 2024] [security2:error] [pid 21424:tid 21424] [client 83.147.54.111:52044] [client 83.147.54.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||www.powerkiteforum.com|F|2"] [data "Matched Data: <script found within REQUEST_URI: /viewthread.php?tid=<script>alert('xss')</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.powerkiteforum.com"] [uri "/viewthread.php"] [unique_id "ZsevHZFnuwI5awhQIiblAgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-08-22 21:23:39
(2 years ago)
XSS Attempt
Hacking
🇺🇸
TheMadBeaker
2024-08-22 20:33:02
(2 years ago)
Fail2Ban Ban Triggered
HTTP Bot Harvester Detected
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-08-22 20:26:41
(2 years ago)
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:212620) triggered by 83.147.54.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 16:26:35.831632 2024] [security2:error] [pid 27584:tid 27602] [client 83.147.54.111:58768] [client 83.147.54.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||aapm.info|F|2"] [data "Matched Data: <script found within REQUEST_URI: /articleseb53.html?cat=<script>alert('xss')</script>&page=1"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "aapm.info"] [uri "/articleseb53.html"] [unique_id "Zsee-zlYZMx3Dh7pKEX4-wAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack