|
🇸🇪
104.23.223.39
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.223.39 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.223.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:58:01.917989 2026] [security2:error] [pid 20980:tid 20980] [client 104.23.223.39:11203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.blastjet.net"] [uri "/.git/HEAD"] [unique_id "aoUpyQLxnlXqghugnwM4QwAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇲
143.105.152.144
|
|
(mod_security) mod_security (id:240335) triggered by 143.105.152.144 (customer.lgosnga1.isp.starlink ...
show more
(mod_security) mod_security (id:240335) triggered by 143.105.152.144 (customer.lgosnga1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:58:05.061996 2026] [security2:error] [pid 18428:tid 18428] [client 143.105.152.144:40587] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 143.105.152.144 (+1 hits since last alert)|peacecampus.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "peacecampus.org"] [uri "/xmlrpc.php"] [unique_id "aoUpzWOo0sOR4dyxYBHfxgAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇳
120.239.147.168
|
|
(mod_security) mod_security (id:210831) triggered by 120.239.147.168 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210831) triggered by 120.239.147.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:45.153031 2026] [security2:error] [pid 2907:tid 2907] [client 120.239.147.168:0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:user-agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||kirklandhighlands.org|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "kirklandhighlands.org"] [uri "/"] [unique_id "aoUpuZaNHlj2xFjImtHq7QAAAAU"], referer: https://kirklandhighlands.org/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
104.23.221.192
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.221.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.221.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:49.176871 2026] [security2:error] [pid 3134:tid 3134] [client 104.23.221.192:11610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.adultshop61.net"] [uri "/.git/HEAD"] [unique_id "aoUpvZKPyp6OXJsy_785RQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇳
182.87.205.108
|
|
(mod_security) mod_security (id:210831) triggered by 182.87.205.108 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 182.87.205.108 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:35.257394 2026] [security2:error] [pid 22540:tid 22540] [client 182.87.205.108:8021] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||harvestfrc.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "harvestfrc.com"] [uri "/"] [unique_id "aoUpr4d3DSWsLyCOZVY8SwAAAAU"], referer: https://harvestfrc.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
193.203.9.146
|
|
(mod_security) mod_security (id:225170) triggered by 193.203.9.146 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 193.203.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:34.559858 2026] [security2:error] [pid 22723:tid 22723] [client 193.203.9.146:23025] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||scala-global.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "scala-global.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoUproXguMJv8g4kas52TAAAAAQ"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
104.23.221.163
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.221.163 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.221.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:28.332576 2026] [security2:error] [pid 418:tid 447] [client 104.23.221.163:10974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.planillas.net"] [uri "/.git/HEAD"] [unique_id "aoUpqIQnvz-FuG-D2P3edwAAAZU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇹
172.232.206.244
|
|
(mod_security) mod_security (id:210492) triggered by 172.232.206.244 (stage.b2beak.com): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 172.232.206.244 (stage.b2beak.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:30.716190 2026] [security2:error] [pid 23299:tid 23299] [client 172.232.206.244:41784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazinghydraulics.com"] [uri "/backend/.env"] [unique_id "aoUpql0qvTiARDMe1h7_pgAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇳
103.206.137.14
|
|
(mod_security) mod_security (id:240335) triggered by 103.206.137.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 103.206.137.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:30.141626 2026] [security2:error] [pid 23150:tid 23150] [client 103.206.137.14:21702] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 103.206.137.14 (+1 hits since last alert)|hertzan.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hertzan.com"] [uri "/xmlrpc.php"] [unique_id "aoUpqqA52llMu3zvchFU4QAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
2400:cb00:1032:1000:160e:fff0:c0e8:94b2
|
|
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:160e:fff0:c0e8:94b2 (Unknow ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:160e:fff0:c0e8:94b2 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:18.848214 2026] [security2:error] [pid 4810:tid 4810] [client 2400:cb00:1032:1000:160e:fff0:c0e8:94b2:9784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kiubo.net"] [uri "/.git/HEAD"] [unique_id "aoUpngQY_WpPUM1pwE8neQAAABo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
174.208.99.116
|
|
(mod_security) mod_security (id:225170) triggered by 174.208.99.116 (116.sub-174-208-99.myvzw.com): ...
show more
(mod_security) mod_security (id:225170) triggered by 174.208.99.116 (116.sub-174-208-99.myvzw.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:20.235555 2026] [security2:error] [pid 14041:tid 14041] [client 174.208.99.116:8081] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||fusteriafontane.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "fusteriafontane.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoUpoJOMzpa8FxLY_pvyNgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
104.23.223.68
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.223.68 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.223.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:14.042520 2026] [security2:error] [pid 27126:tid 27169] [client 104.23.223.68:14075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.metropaint.net"] [uri "/.git/config"] [unique_id "aoUpmjR9-EnZBLwTmulEbgAAANU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
104.23.223.6
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.223.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.223.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:14.133505 2026] [security2:error] [pid 27126:tid 27168] [client 104.23.223.6:11982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.metropaint.net"] [uri "/.git/HEAD"] [unique_id "aoUpmjR9-EnZBLwTmulEbwAAANQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
162.158.182.124
|
|
(mod_security) mod_security (id:210492) triggered by 162.158.182.124 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:10.578692 2026] [security2:error] [pid 29514:tid 29514] [client 162.158.182.124:13695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.k0cgy.net"] [uri "/.git/config"] [unique_id "aoUplsQqKNqp6uWLaEpcxwAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
134.122.20.41
|
|
(mod_security) mod_security (id:210492) triggered by 134.122.20.41 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 134.122.20.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:01.412597 2026] [security2:error] [pid 21523:tid 21523] [client 134.122.20.41:51160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.160"] [uri "/.git/config"] [unique_id "aoUpjRs4aap6kJG6rjZBsgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
104.23.223.22
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.223.22 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.223.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:00.017178 2026] [security2:error] [pid 23339:tid 23339] [client 104.23.223.22:11693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thommesen.net"] [uri "/.git/HEAD"] [unique_id "aoUpjHAy9TX--F3h2BCQigAAABk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
104.23.223.23
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.223.23 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.223.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:57:00.017169 2026] [security2:error] [pid 17761:tid 17761] [client 104.23.223.23:9813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thommesen.net"] [uri "/.git/config"] [unique_id "aoUpjMjskDOFxBOlpZfurQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
45.147.233.63
|
|
(mod_security) mod_security (id:210350) triggered by 45.147.233.63 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.233.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:49.991216 2026] [security2:error] [pid 17266:tid 17266] [client 45.147.233.63:50487] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||marketask.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "marketask.com"] [uri "/"] [unique_id "aoUpgedMGr6GIYFzkGXZdgAAAAM"], referer: https://www.facebook.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
162.158.182.165
|
|
(mod_security) mod_security (id:210492) triggered by 162.158.182.165 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.182.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:46.927868 2026] [security2:error] [pid 3777:tid 3777] [client 162.158.182.165:12720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.brychta.net"] [uri "/.git/config"] [unique_id "aoUpfgQDwx4SoDho4Ydi8wAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇵🇰
39.34.146.102
|
|
(mod_security) mod_security (id:240335) triggered by 39.34.146.102 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 39.34.146.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:42.940112 2026] [security2:error] [pid 14042:tid 14042] [client 39.34.146.102:36919] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 39.34.146.102 (+1 hits since last alert)|midwayisland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "midwayisland.com"] [uri "/xmlrpc.php"] [unique_id "aoUpekg-5Sj8ETLDfELP8QAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇳
112.10.196.174
|
|
(mod_security) mod_security (id:210831) triggered by 112.10.196.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210831) triggered by 112.10.196.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:36.857734 2026] [security2:error] [pid 418:tid 430] [client 112.10.196.174:8049] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||woofnrose.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "woofnrose.com"] [uri "/"] [unique_id "aoUpdIQnvz-FuG-D2P3eCAAAAYQ"], referer: https://woofnrose.com/
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
104.23.223.102
|
|
(mod_security) mod_security (id:210492) triggered by 104.23.223.102 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.23.223.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:35.526351 2026] [security2:error] [pid 13650:tid 13650] [client 104.23.223.102:11365] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jerryglass.net"] [uri "/.git/config"] [unique_id "aoUpc1IdlzJQiS6WumSauAAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
157.22.124.61
|
|
(mod_security) mod_security (id:225170) triggered by 157.22.124.61 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 157.22.124.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:32.972638 2026] [security2:error] [pid 27004:tid 27004] [client 157.22.124.61:54337] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||staben.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoUpcAbsQop3Bw46waAvKwAAAAM"], referer: https://www.google.com
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
2400:cb00:1032:1000:fc53:cf7f:353d:95ad
|
|
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:fc53:cf7f:353d:95ad (Unknow ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:cb00:1032:1000:fc53:cf7f:353d:95ad (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:28.510039 2026] [security2:error] [pid 19093:tid 19093] [client 2400:cb00:1032:1000:fc53:cf7f:353d:95ad:14223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wcvfra.net"] [uri "/.git/HEAD"] [unique_id "aoUpbLE58ngcZLNEMWaMIgAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇸
145.79.152.127
|
|
(mod_security) mod_security (id:225170) triggered by 145.79.152.127 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 145.79.152.127 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 23:56:20.200003 2026] [security2:error] [pid 21564:tid 21564] [client 145.79.152.127:10141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||actability.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "actability.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aoUpZCUQ4tt1H39GbviWYQAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|