|
🇨🇭
backslash
|
|
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
|
Bad Web Bot
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 05 05:05:34.617446 2025] [security2:error] [pid 43525:tid 43525] [client 85.239.59.92:27615] [client 85.239.59.92] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hudson II/Thumbs.db"] [unique_id "Z8gh7m6lqeTQfMswbL1nIgAAABI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hudson%20II/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Attempted brute force login to web vpn
|
Hacking
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 14:05:34.986261 2024] [security2:error] [pid 1414059:tid 1414059] [client 85.239.59.92:59041] [client 85.239.59.92] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Detrick/Thumbs.db"] [unique_id "Zy-yfoZe8-5-rO6Co9q8NgAAAAU"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Detrick/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇦
wil.com
|
|
GlobalProtect login attempts with user mcooper.
|
VPN IP
Brute-Force
|
|
|
🇺🇸
MrDD
|
|
Botnet Attacking Cisco Web VPN
|
Brute-Force
|
|
|
Anonymous
|
|
"Scanning for multiple vulnerable file extensions and wp-login.php xmlrpc.php"
|
Web App Attack
|
|
|
🇬🇧
essinghigh
|
|
1718300374 # Service_probe # SIGNATURE_SEND # source_ip:85.239.59.92 # dst_port:60000
...
|
Port Scan
|
|
|
Anonymous
|
|
"Scanning for multiple vulnerable file extensions and wp-login.php xmlrpc.php"
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 28 04:00:48.931929 2024] [security2:error] [pid 16287] [client 85.239.59.92:11209] [client 85.239.59.92] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portalvasco.com|F|2"] [data ".lacasadelarcerojo.wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portalvasco.com"] [uri "/blog/2009/08/pere-navarro-el-\\xe2\\x80\\x9cfranco\\xe2\\x80\\x9d-de-las-carreteras\\xe2\\x80\\xa6/www.lacasadelarcerojo.wordpress.com"] [unique_id "ZlWPMG2fadpD7M81evtFEQAAAAg"], referer: https://portalvasco.com/blog/2009/08/pere-navarro-el-%e2%80%9cfranco%e2%80%9d-de-las-carreteras%e2%80%a6/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 85.239.59.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 23 21:09:38.171187 2024] [security2:error] [pid 8921] [client 85.239.59.92:15313] [client 85.239.59.92] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vitalitywebb.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Longhorn II/Thumbs.db"] [unique_id "Zk_o0iq_j_klQpJ_jf-LnwAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Longhorn%20II/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇨🇭
backslash
|
|
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
|
Bad Web Bot
|
|
|
🇦🇺
oncord
|
|
Form spam
|
Web Spam
|
|
|
🇨🇭
backslash
|
|
honeypot
|
Bad Web Bot
|
|
|
Anonymous
|
|
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
|
Brute-Force
SSH
|
|