🇨🇦
JuicyJ
2025-02-03 14:14:01
UTC ·
(1 year ago)
Excessive crawling/scraping
Web App Attack
🇲🇾
Rizzy
2025-01-28 01:32:59
UTC ·
(1 year ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-01-27 23:57:46
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 18:57:39.691839 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 18:57:39.691839 2025] [security2:error] [pid 13625:tid 13625] [client 92.210.165.218:51970] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jwwsb.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jwwsb.org"] [uri "/index.php"] [unique_id "Z5gdc28_NgzbsCCAQFPn0wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-01-27 22:40:01
UTC ·
(1 year ago)
| SQL injection attempt.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-01-27 21:08:43
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 16:08:38.054512 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 16:08:38.054512 2025] [security2:error] [pid 15780:tid 15780] [client 92.210.165.218:59292] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fabwestmfg.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fabwestmfg.com"] [uri "/mechanical.php"] [unique_id "Z5f11r-aOSo4ODF6hFYBVwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-27 18:21:36
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 13:21:32.184847 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 13:21:32.184847 2025] [security2:error] [pid 2765060:tid 2765060] [client 92.210.165.218:55124] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.keysenterprise.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.keysenterprise.net"] [uri "/sunrisevillage/component/keyfiles/file/dl"] [unique_id "Z5fOrMdoOTAmsmHG5gavCwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-27 18:03:46
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 13:03:40.777901 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 13:03:40.777901 2025] [security2:error] [pid 21995:tid 21995] [client 92.210.165.218:60541] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mathewsdental.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mathewsdental.com"] [uri "/index.php"] [unique_id "Z5fKfKUyO8RBxE54yF3m4wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-27 17:29:33
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 12:29:30.119360 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 27 12:29:30.119360 2025] [security2:error] [pid 24484:tid 24484] [client 92.210.165.218:54805] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.twilighthackers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.twilighthackers.com"] [uri "/showhdcp.php"] [unique_id "Z5fCenr0l0_SnlJbvssI-QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-01-25 14:33:02
UTC ·
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇺🇸
rdpguard.com
2025-01-25 13:54:18
UTC ·
(1 year ago)
RdpGuard detected brute-force attempt on ASP.NET Web Forms
Brute-Force
🇺🇸
TPI-Abuse
2025-01-25 13:14:20
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 25 08:14:16.355737 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 25 08:14:16.355737 2025] [security2:error] [pid 3318128:tid 3318128] [client 92.210.165.218:61450] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oualierealty.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oualierealty.com"] [uri "/index.php"] [unique_id "Z5TjqKcs0JFcZju_OGyovwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇹
Information Security
2025-01-25 12:38:17
UTC ·
(1 year ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2025-01-25 12:36:30
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 25 07:36:27.400251 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 25 07:36:27.400251 2025] [security2:error] [pid 4157995:tid 4157995] [client 92.210.165.218:63545] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||old.renju.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "old.renju.net"] [uri "/media/showgame.php"] [unique_id "Z5Tay9Tik7RZ8BDYOcvQCAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webconcept.one
2025-01-25 12:36:00
UTC ·
(1 year ago)
Scraping weird urls with html escapes and so on - Spamy ...
Exploited Host
🇺🇸
TPI-Abuse
2025-01-22 20:07:09
UTC ·
(1 year ago)
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 22 15:07:02.712155 2025] [security2:error ...
show more
(mod_security) mod_security (id:210350) triggered by 92.210.165.218 (ipservice-092-210-165-218.092.210.pools.vodafone-ip.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 22 15:07:02.712155 2025] [security2:error] [pid 31818:tid 31818] [client 92.210.165.218:57672] [client 92.210.165.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ashwoodsecurity.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ashwoodsecurity.com"] [uri "/"] [unique_id "Z5FP5r8yz_EgWDrBjeNXEAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack