|
🇸🇬
34.142.244.238
|
|
(mod_security) mod_security (id:210492) triggered by 34.142.244.238 (238.244.142.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.244.238 (238.244.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:39:41.722085 2026] [security2:error] [pid 8635:tid 8635] [client 34.142.244.238:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nyemdr.com"] [uri "/api/system/fileView"] [unique_id "autt3dNLzZQiZ1nS44FZSQAAACk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
170.78.157.95
|
|
(mod_security) mod_security (id:210492) triggered by 170.78.157.95 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.78.157.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:39:35.307703 2026] [security2:error] [pid 19810:tid 19810] [client 170.78.157.95:38488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "act-research.com"] [uri "/orchid/ehn-dev.orchidsuites.net/g-trends/.git/objects/ce/"] [unique_id "autt16MLi1-FmRYkYwc0fwAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇴
181.63.24.5
|
|
(mod_security) mod_security (id:210492) triggered by 181.63.24.5 (static-ip-cr18163245.cable.net.co) ...
show more
(mod_security) mod_security (id:210492) triggered by 181.63.24.5 (static-ip-cr18163245.cable.net.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:39:18.906350 2026] [security2:error] [pid 18149:tid 18149] [client 181.63.24.5:6240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "act-research.com"] [uri "/orchid/ehn-dev.orchidsuites.net/g-trends/.git/objects/ce/"] [unique_id "auttxos59snAnOAZtnItowAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
51.15.43.250
|
|
(mod_security) mod_security (id:210492) triggered by 51.15.43.250 (250-43-15-51.rev.scw.cloud): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.43.250 (250-43-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:39:21.988954 2026] [security2:error] [pid 9517:tid 9517] [client 51.15.43.250:59562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teleplussolutions.com"] [uri "/.env"] [unique_id "auttyYhsfjYMTfTKHrHc-AAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
207.191.166.167
|
|
(mod_security) mod_security (id:225170) triggered by 207.191.166.167 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 207.191.166.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:39:16.685185 2026] [security2:error] [pid 2289538:tid 2289561] [client 207.191.166.167:41194] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||danelandia.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "danelandia.aafm.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auttxIZPmcRb_5C1-yn_VwAAARU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇦
105.155.104.31
|
|
(mod_security) mod_security (id:225170) triggered by 105.155.104.31 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 105.155.104.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:39:16.982836 2026] [security2:error] [pid 2339140:tid 2339167] [client 105.155.104.31:34208] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||danelandia.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "danelandia.aafm.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auttxEvSFTUqLmVhHmHpOQAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
51.15.85.11
|
|
(mod_security) mod_security (id:210492) triggered by 51.15.85.11 (11-85-15-51.rev.scw.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 51.15.85.11 (11-85-15-51.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:57.777472 2026] [security2:error] [pid 2172:tid 2172] [client 51.15.85.11:50452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.teleplussolutions.com"] [uri "/.env"] [unique_id "auttsSb0Bw1qz5k1jQcU1QAAAEM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
47.152.215.11
|
|
(mod_security) mod_security (id:210730) triggered by 47.152.215.11 (47-152-215-11.fdr01.blfl.ca.ip.f ...
show more
(mod_security) mod_security (id:210730) triggered by 47.152.215.11 (47-152-215-11.fdr01.blfl.ca.ip.frontiernet.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:42.149395 2026] [security2:error] [pid 8569:tid 8569] [client 47.152.215.11:58508] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||picayunity.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "picayunity.com"] [uri "/2015/theukuleleway.com"] [unique_id "auttoqRhq_VurZ-pOw1wxgAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
69.118.88.160
|
|
(mod_security) mod_security (id:211190) triggered by 69.118.88.160 (ool-457658a0.dyn.optonline.net): ...
show more
(mod_security) mod_security (id:211190) triggered by 69.118.88.160 (ool-457658a0.dyn.optonline.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:36.943090 2026] [security2:error] [pid 28615:tid 28651] [client 69.118.88.160:53729] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||pref-realestate.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?page=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pref-realestate.com"] [uri "/index.php"] [unique_id "auttnPppzSEySg_j8Nb0kAAAABQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
71.25.75.86
|
|
(mod_security) mod_security (id:211190) triggered by 71.25.75.86 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:211190) triggered by 71.25.75.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:37.057771 2026] [security2:error] [pid 28615:tid 28642] [client 71.25.75.86:44976] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||pref-realestate.com|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /index.php?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pref-realestate.com"] [uri "/index.php"] [unique_id "auttnfppzSEySg_j8Nb0kQAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇭🇰
124.156.110.233
|
|
(mod_security) mod_security (id:210730) triggered by 124.156.110.233 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210730) triggered by 124.156.110.233 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:36.995896 2026] [security2:error] [pid 8659:tid 8659] [client 124.156.110.233:56360] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||picayunity.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "picayunity.com"] [uri "/2015/theukuleleway.com"] [unique_id "auttnLtd30O79pwrSBIWmgAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
2a09:bac1:76c0:500::50a:7
|
|
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:500::50a:7 (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:76c0:500::50a:7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:24.791748 2026] [security2:error] [pid 6084:tid 6084] [client 2a09:bac1:76c0:500::50a:7:53472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sidsales.com"] [uri "/api/.env.bak"] [unique_id "auttkMfGDJLBsTB_C4PcoAAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇷
190.19.117.89
|
|
(mod_security) mod_security (id:225170) triggered by 190.19.117.89 (89-117-19-190.fibertel.com.ar): ...
show more
(mod_security) mod_security (id:225170) triggered by 190.19.117.89 (89-117-19-190.fibertel.com.ar): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:10.881694 2026] [security2:error] [pid 2339140:tid 2339152] [client 190.19.117.89:41240] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||danelandia.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "danelandia.aafm.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auttgkvSFTUqLmVhHmHo7AAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
177.10.214.21
|
|
(mod_security) mod_security (id:210350) triggered by 177.10.214.21 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 177.10.214.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:38:07.393586 2026] [security2:error] [pid 21802:tid 21802] [client 177.10.214.21:31700] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cbcfargo.com"] [uri "/resources/promise/true_joy.pdf"] [unique_id "auttf0n3583X3vEglL4giQAAAAg"], referer: https://cbcfargo.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
31.134.1.148
|
|
(mod_security) mod_security (id:210350) triggered by 31.134.1.148 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.1.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:53.411123 2026] [security2:error] [pid 7978:tid 7978] [client 31.134.1.148:26797] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ampstudio.eu|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ampstudio.eu"] [uri "/"] [unique_id "auttcXHrfFb1XKXRKpOcvAAAADI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
193.202.80.36
|
|
(mod_security) mod_security (id:210350) triggered by 193.202.80.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 193.202.80.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:35.919665 2026] [security2:error] [pid 29240:tid 29240] [client 193.202.80.36:57247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ampstudio.eu|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ampstudio.eu"] [uri "/"] [unique_id "auttX_21J3JzrKAIMetMnwAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
130.49.11.104
|
|
(mod_security) mod_security (id:210350) triggered by 130.49.11.104 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 130.49.11.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:31.879434 2026] [security2:error] [pid 21888:tid 21888] [client 130.49.11.104:40785] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/maamarim/drugie/10/Gutina1.html"] [unique_id "auttW8ntkVV-kJo2PaOusAAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
40.77.167.247
|
|
(mod_security) mod_security (id:210730) triggered by 40.77.167.247 (msnbot-40-77-167-247.search.msn. ...
show more
(mod_security) mod_security (id:210730) triggered by 40.77.167.247 (msnbot-40-77-167-247.search.msn.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:30.347989 2026] [security2:error] [pid 32183:tid 32183] [client 40.77.167.247:62997] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nrvoutdoors.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nrvoutdoors.com"] [uri "/TR/Thumbs.db"] [unique_id "auttWi9R_8i0vys9WH6qAAAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
136.90.25.178
|
|
(mod_security) mod_security (id:210730) triggered by 136.90.25.178 (178.25.90.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 136.90.25.178 (178.25.90.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:26.860664 2026] [security2:error] [pid 2339140:tid 2339162] [client 136.90.25.178:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ajbruner.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ajbruner.com"] [uri "/z9x8c7v6b5-debug-trigger-ajbruner.com"] [unique_id "auttVkvSFTUqLmVhHmHoRwAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇱
172.68.159.107
|
|
(mod_security) mod_security (id:210492) triggered by 172.68.159.107 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:24.055918 2026] [security2:error] [pid 852:tid 852] [client 172.68.159.107:14110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danasedge.cain2016.org"] [uri "/.git/config"] [unique_id "auttVNlpEwkxw1JMFkdXEQAAACs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇱
172.68.159.108
|
|
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 172.68.159.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:24.267011 2026] [security2:error] [pid 850:tid 850] [client 172.68.159.108:12073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danasedge.cain2016.org"] [uri "/.git/HEAD"] [unique_id "auttVDWUAbCogWMb7ILfjAAAACk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇶
65.20.233.178
|
|
(mod_security) mod_security (id:225170) triggered by 65.20.233.178 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.20.233.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:21.947420 2026] [security2:error] [pid 19356:tid 19356] [client 65.20.233.178:46532] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.asapstarsmogcheck.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.asapstarsmogcheck.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "auttUbjlHMN5mbQ2sl--cgAAAA0"], referer: https://www.asapstarsmogcheck.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
88.218.44.217
|
|
(mod_security) mod_security (id:210350) triggered by 88.218.44.217 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 88.218.44.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:17.516502 2026] [security2:error] [pid 21616:tid 21616] [client 88.218.44.217:36033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/bedia/bedia/bedia.html"] [unique_id "auttTSBO4b3VpuJZxENHiAAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇦
94.231.189.98
|
|
(mod_security) mod_security (id:225170) triggered by 94.231.189.98 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 94.231.189.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:18.923102 2026] [security2:error] [pid 2159172:tid 2159196] [client 94.231.189.98:41290] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||danelandia.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "danelandia.aafm.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auttTl_dCsnMAVhY5mGARwAAAEs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇿
144.124.196.51
|
|
(mod_security) mod_security (id:225170) triggered by 144.124.196.51 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 144.124.196.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 12:37:16.322173 2026] [security2:error] [pid 2289538:tid 2289554] [client 144.124.196.51:1489] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||danelandia.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "danelandia.aafm.us"] [uri "/wp-json/wp/v2/users/me"] [unique_id "auttTIZPmcRb_5C1-yn-pQAAAQ4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|