🇺🇸
TPI-Abuse
2024-03-30 11:01:42
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 30 07:01:37.172476 2024] [security2:error] [pid 2297] [client 84.32.71.89:52709] [client 84.32.71.89] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.crypto-stamps.com|F|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.crypto-stamps.com"] [uri "/wallet.dat"] [unique_id "ZgfxEaLnd0iL1Ywc2n8XzQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-13 20:47:11
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 16:47:07.537703 2024] [security2:error] [pid 29476] [client 84.32.71.89:19445] [client 84.32.71.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dudleyanddudley.com"] [uri "/bak/sftp-config.json"] [unique_id "ZfIQy3RvC6YH7jVZcU_6iwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-11 02:14:30
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 10 22:14:26.202505 2024] [security2:error] [pid 3283] [client 84.32.71.89:28535] [client 84.32.71.89] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nationalenq.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nationalenq.com"] [uri "/restore/www.sql"] [unique_id "Ze5pAqVRqT29NCPOTIGVHwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hbrks
2024-02-27 22:12:23
(2 years ago)
HEAD http://leralmedia.com/bak/backup.tar.gz
statusCode: 503
Web Spam
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2024-02-22 13:26:40
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 22 08:26:36.950855 2024] [security2:error] [pid 1756260] [client 84.32.71.89:48417] [client 84.32.71.89] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||firejasstrio.com|F|2"] [data ".com.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "firejasstrio.com"] [uri "/bak/firejazztrio.com.sql"] [unique_id "ZddLjIVFSJnbYUmSqfhAswAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-02-17 21:52:03
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 17 16:51:56.725554 2024] [security2:error] [pid 5301] [client 84.32.71.89:25323] [client 84.32.71.89] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||oliverhardy.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oliverhardy.com"] [uri "/bak/dump.sql"] [unique_id "ZdEqfDpvdgaIH_2y3PvMZAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
unifr
2024-02-07 00:08:39
(2 years ago)
Unauthorized IMAP connection attempt
Brute-Force
🇺🇸
TPI-Abuse
2024-01-26 17:38:09
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 26 12:38:04.806689 2024] [security2:error] [pid 12216] [client 84.32.71.89:43657] [client 84.32.71.89] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||swhowell.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "swhowell.com"] [uri "/bak/dump.sql"] [unique_id "ZbPt_B-IiQTAUIhoLvr_EAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-01-16 00:20:32
(2 years ago)
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210730) triggered by 84.32.71.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 15 19:20:27.044666 2024] [security2:error] [pid 24537] [client 84.32.71.89:61327] [client 84.32.71.89] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bitcointoolfair.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolfair.com"] [uri "/back/mysql.sql"] [unique_id "ZaXLy_f_uHsXDKKnjJvrWQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
FAZ_Noc
2023-12-19 07:09:50
(2 years ago)
SQL injection - Unauthorized connection attempt detected from IP address
SQL Injection
🇬🇷
gbetsis
2023-10-31 03:35:29
(2 years ago)
TCP Port Scanning
Port Scan
Exploited Host