🇩🇪
5.75.138.225
05 Nov 2022
Time: Sat Nov 5 14:13:42 2022 -0300
IP: 5.75.138.225 (DE/Germany/static.225.138.75.5.cli ...
show more
Time: Sat Nov 5 14:13:42 2022 -0300
IP: 5.75.138.225 (DE/Germany/static.225.138.75.5.clients.your-server.de)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Sat Nov 05 14:13:31.388572 2022] [:error] [pid 2000:tid 47920815904512] [client 5.75.138.225:0] [client 5.75.138.225] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Bad Web Bot
Web App Attack
🇫🇮
65.109.22.106
01 Nov 2022
Time: Tue Nov 1 17:23:56 2022 -0300
IP: 65.109.22.106 (FI/Finland/static.106.22.109.65.c ...
show more
Time: Tue Nov 1 17:23:56 2022 -0300
IP: 65.109.22.106 (FI/Finland/static.106.22.109.65.clients.your-server.de)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Bad Web Bot
Web App Attack
🇺🇸
18.191.232.18
29 Oct 2022
Time: Sat Oct 29 06:15:20 2022 -0300
IP: 18.191.232.18 (US/United States/ec2-18-191-232-1 ...
show more
Time: Sat Oct 29 06:15:20 2022 -0300
IP: 18.191.232.18 (US/United States/ec2-18-191-232-18.us-east-2.compute.amazonaws.com)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Bad Web Bot
Web App Attack
🇺🇸
54.183.74.105
29 Oct 2022
Time: Sat Oct 29 05:32:54 2022 -0300
IP: 54.183.74.105 (US/United States/ec2-54-183-74-10 ...
show more
Time: Sat Oct 29 05:32:54 2022 -0300
IP: 54.183.74.105 (US/United States/ec2-54-183-74-105.us-west-1.compute.amazonaws.com)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Bad Web Bot
Web App Attack
🇧🇿
45.227.254.11
29 Oct 2022
Time: Sat Oct 29 00:56:14 2022 -0300
IP: 45.227.254.11 (LT/Lithuania/hostby.xwinnet.biz)
...
show more
Time: Sat Oct 29 00:56:14 2022 -0300
IP: 45.227.254.11 (LT/Lithuania/hostby.xwinnet.biz)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Bad Web Bot
Web App Attack
🇧🇭
77.92.170.84
27 Oct 2022
Email Spam
🇫🇷
4.233.80.216
27 Oct 2022
Time: Thu Oct 27 18:12:28 2022 -0300
IP: 4.233.80.216 (FR/France/-)
Failures: 5 (mod_sec ...
show more
Time: Thu Oct 27 18:12:28 2022 -0300
IP: 4.233.80.216 (FR/France/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Exploited Host
Web App Attack
🇺🇸
18.212.203.13
27 Oct 2022
Time: Thu Oct 27 07:32:36 2022 -0300
IP: 18.212.203.13 (US/United States/ec2-18-212-203-1 ...
show more
Time: Thu Oct 27 07:32:36 2022 -0300
IP: 18.212.203.13 (US/United States/ec2-18-212-203-13.compute-1.amazonaws.com)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Exploited Host
Web App Attack
🇩🇪
18.192.123.187
27 Oct 2022
Time: Thu Oct 27 06:00:17 2022 -0300
IP: 18.192.123.187 (DE/Germany/ec2-18-192-123-187.eu ...
show more
Time: Thu Oct 27 06:00:17 2022 -0300
IP: 18.192.123.187 (DE/Germany/ec2-18-192-123-187.eu-central-1.compute.amazonaws.com)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Exploited Host
Web App Attack
🇮🇪
3.252.158.223
27 Oct 2022
Time: Thu Oct 27 04:56:40 2022 -0300
IP: 3.252.158.223 (IE/Ireland/ec2-3-252-158-223.eu-w ...
show more
Time: Thu Oct 27 04:56:40 2022 -0300
IP: 3.252.158.223 (IE/Ireland/ec2-3-252-158-223.eu-west-1.compute.amazonaws.com)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Exploited Host
Web App Attack
🇩🇪
88.198.192.187
26 Oct 2022
Time: Wed Oct 26 22:12:25 2022 -0300
IP: 88.198.192.187 (DE/Germany/static.88-198-192-187 ...
show more
Time: Wed Oct 26 22:12:25 2022 -0300
IP: 88.198.192.187 (DE/Germany/static.88-198-192-187.clients.your-server.de)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Wed Oct 26 22:10:46.886000 2022] [:error] [pid 20898:tid 47264309454592] [client 88.198.192.187:0] [client 88.198.192.187] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Bad Web Bot
Web App Attack
🇩🇪
162.55.42.215
26 Oct 2022
Time: Wed Oct 26 15:53:00 2022 -0300
IP: 162.55.42.215 (DE/Germany/static.215.42.55.162.c ...
show more
Time: Wed Oct 26 15:53:00 2022 -0300
IP: 162.55.42.215 (DE/Germany/static.215.42.55.162.clients.your-server.de)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Wed Oct 26 15:52:19.693305 2022] [:error] [pid 20899:tid 47264235988736] [client 162.55.42.215:0] [client 162.55.42.215] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Exploited Host
Web App Attack
🇫🇷
185.81.157.214
26 Oct 2022
Time: Wed Oct 26 09:40:51 2022 -0300
IP: 185.81.157.214 (FR/France/-)
Failures: 5 (mod_s ...
show more
Time: Wed Oct 26 09:40:51 2022 -0300
IP: 185.81.157.214 (FR/France/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Wed Oct 26 09:40:44.427059 2022] [:error] [pid 31010:tid 46996602033920] [client 185.81.157.214:0] [client 185.81.157.214] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Exploited Host
Web App Attack
🇺🇸
20.163.72.176
24 Oct 2022
Time: Mon Oct 24 11:57:48 2022 -0300
IP: 20.163.72.176 (US/United States/-)
Failures: 5 ...
show more
Time: Mon Oct 24 11:57:48 2022 -0300
IP: 20.163.72.176 (US/United States/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Mon Oct 24 11:57:44.569291 2022] [:error] [pid 13302:tid 46996708722432] [client 20.163.72.176:0] [client 20.163.72.176] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Bad Web Bot
Web App Attack
🇬🇧
5.188.206.26
23 Oct 2022
Time: Sun Oct 23 01:44:32 2022 -0300
IP: 5.188.206.26 (US/United States/-)
Failures: 5 ( ...
show more
Time: Sun Oct 23 01:44:32 2022 -0300
IP: 5.188.206.26 (US/United States/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Sun Oct 23 01:44:18.369539 2022] [:error] [pid 4388:tid 46996694013696] [client 5.188.206.26:0] [client 5.188.206.26] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 60)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Bad Web Bot
Web App Attack
🇺🇸
54.67.50.67
22 Oct 2022
Time: Sat Oct 22 03:07:35 2022 -0300
IP: 54.67.50.67 (US/United States/ec2-54-67-50-67.us ...
show more
Time: Sat Oct 22 03:07:35 2022 -0300
IP: 54.67.50.67 (US/United States/ec2-54-67-50-67.us-west-1.compute.amazonaws.com)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Sat Oct 22 03:07:33.436494 2022] [:error] [pid 13132:tid 46996700317440] [client 54.67.50.67:0] [client 54.67.50.67] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Bad Web Bot
Web App Attack
🇺🇸
20.127.138.104
21 Oct 2022
Time: Fri Oct 21 22:39:25 2022 -0300
IP: 20.127.138.104 (US/United States/-)
Failures: 5 ...
show more
Time: Fri Oct 21 22:39:25 2022 -0300
IP: 20.127.138.104 (US/United States/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Fri Oct 21 22:39:17.300124 2022] [:error] [pid 13164:tid 46996698216192] [client 20.127.138.104:0] [client 20.127.138.104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Bad Web Bot
Web App Attack
🇺🇿
185.74.5.84
21 Oct 2022
Time: Fri Oct 21 07:37:24 2022 -0300
IP: 185.74.5.84 (UZ/Uzbekistan/-)
Failures: 5 (mod_ ...
show more
Time: Fri Oct 21 07:37:24 2022 -0300
IP: 185.74.5.84 (UZ/Uzbekistan/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
Log entries:
[Fri Oct 21 07:37:16.782536 2022] [:error] [pid 13134:tid 46996708722432] [client 185.74.5.84:0] [client 185.74.5.84] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"]
show less
Bad Web Bot
Web App Attack
🇬🇧
172.70.86.134
17 Oct 2022
Remote IP : 172.70.86.134
Deleted : No
Quarantined : Yes [/ ...
show more
Remote IP : 172.70.86.134
Deleted : No
Quarantined : Yes [/home/quarantine/cxscgi/20221017-084136-Y00_cKBHq5wJqy1ShnRTCgAAAVg-file-4ToZLz.1666006897_1]
show less
Bad Web Bot
Web App Attack
🇳🇱
80.82.77.139
16 Oct 2022
Time: Sun Oct 16 07:31:52 2022 -0300
IP: 80.82.77.139 (NL/Netherlands/dojo.census.shodan. ...
show more
Time: Sun Oct 16 07:31:52 2022 -0300
IP: 80.82.77.139 (NL/Netherlands/dojo.census.shodan.io)
Failures: 10 (eximsyntax)
Interval: 3600 seconds
Blocked: Permanent Block [LF_EXIMSYNTAX]
Log entries:
2022-10-16 07:31:08 SMTP call from dojo.census.shodan.io [80.82.77.139]:49304 dropped: too many syntax or protocol errors (last command was "?", NULL)
2022-10-16 07:31:09 SMTP call from dojo.census.shodan.io [80.82.77.139]:50216 dropped: too many syntax or protocol errors (last command was "?", NULL)
show less
Bad Web Bot
Web App Attack
🇳🇱
80.82.77.33
09 Oct 2022
Time: Sun Oct 9 14:35:43 2022 -0300
IP: 80.82.77.33 (NL/Netherlands/sky.census.shodan.io ...
show more
Time: Sun Oct 9 14:35:43 2022 -0300
IP: 80.82.77.33 (NL/Netherlands/sky.census.shodan.io)
Failures: 10 (eximsyntax)
Interval: 3600 seconds
Blocked: Permanent Block [LF_EXIMSYNTAX]
show less
Bad Web Bot
Web App Attack
🇮🇩
114.79.57.115
09 Oct 2022
/index.php?action=76b676e22323b6562747e616e6a727976735d235f234e2f26627976735e2f2b6a7e2a72607e2964726 ...
show more
/index.php?action=76b676e22323b6562747e616e6a727976735d235f234e2f26627976735e2f2b6a7e2a72607e296472616072776
Remote IP : 114.79.57.115
Deleted : No
Quarantined : Yes [/home/quarantine/cxscgi/20221009-115956-Y0Lh7LSlFcG09TFVtzt_QgAAAUY-file-Vk1PnS.1665327598_1]
show less
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
137.184.214.149
09 Oct 2022
Time: Sun Oct 9 03:14:03 2022 -0300
IP: 137.184.214.149 (US/United States/-)
Failures: ...
show more
Time: Sun Oct 9 03:14:03 2022 -0300
IP: 137.184.214.149 (US/United States/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Bad Web Bot
Web App Attack
🇺🇸
71.6.135.131
08 Oct 2022
Time: Fri Oct 7 01:01:29 2022 -0300
IP: 71.6.135.131 (US/United States/soda.census.shoda ...
show more
Time: Fri Oct 7 01:01:29 2022 -0300
IP: 71.6.135.131 (US/United States/soda.census.shodan.io)
Failures: 10 (eximsyntax)
Interval: 3600 seconds
Blocked: Permanent Block [LF_EXIMSYNTAX]
show less
Bad Web Bot
Web App Attack
🇷🇺
91.240.118.252
08 Oct 2022
Time: Sat Oct 8 10:03:42 2022 -0300
IP: 91.240.118.252 (RU/Russia/-)
Failures: 5 (mod_s ...
show more
Time: Sat Oct 8 10:03:42 2022 -0300
IP: 91.240.118.252 (RU/Russia/-)
Failures: 5 (mod_security)
Interval: 3600 seconds
Blocked: Permanent Block [LF_MODSEC]
show less
Bad Web Bot
Web App Attack