|
🇰🇷
43.128.156.124
|
|
(mod_security) mod_security (id:210350) triggered by 43.128.156.124 (KR/South Korea/-): 1 in the las ...
show more
(mod_security) mod_security (id:210350) triggered by 43.128.156.124 (KR/South Korea/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 17 14:57:38.339522 2025] [security2:error] [pid 2632626:tid 2632664] [client 43.128.156.124:39180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fitchugs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fitchugs.com"] [uri "/"] [unique_id "aMsEouvXDYRnnnhokFPHTgAAAEg"]
show less
|
Hacking
|
|
🇺🇸
162.240.239.64
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇲🇾
163.47.203.81
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇮🇹
81.88.53.43
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇱🇻
196.196.53.104
|
|
(mod_security) mod_security (id:210801) triggered by 196.196.53.104 (LV/Latvia/-): 1 in the last 360 ...
show more
(mod_security) mod_security (id:210801) triggered by 196.196.53.104 (LV/Latvia/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 17 14:49:20.667476 2025] [security2:error] [pid 2632626:tid 2632675] [client 196.196.53.104:53729] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "openvas" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "17"] [id "210801"] [rev "2"] [msg "COMODO WAF: Request Indicates a Security Scanner Scanned the Site||srv.mogbox.net|F|2"] [data "mozilla/5.0 [en] (x11, u; openvas-vt 9.0.3)"] [severity "CRITICAL"] [tag "CWAF"] [tag "Agents"] [hostname "srv.mogbox.net"] [uri "/"] [unique_id "aMsCsOvXDYRnnnhokFPHMAAAAFM"]
show less
|
Hacking
|
|
🇵🇱
2a01:96e0:0:545:3::6
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇨🇳
182.92.110.55
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇮🇩
103.167.217.137
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇨🇱
190.215.106.243
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇩🇪
192.250.229.38
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇺🇸
208.109.32.191
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇫🇷
185.177.72.47
|
|
(mod_security) mod_security (id:210492) triggered by 185.177.72.47 (FR/France/-): 1 in the last 3600 ...
show more
(mod_security) mod_security (id:210492) triggered by 185.177.72.47 (FR/France/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 17 14:01:26.626563 2025] [security2:error] [pid 2632626:tid 2632674] [client 185.177.72.47:48782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fitchugs.com"] [uri "/.git/"] [unique_id "aMr3duvXDYRnnnhokFPGrQAAAFI"]
show less
|
Hacking
|
|
🇺🇸
198.57.247.186
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇮🇳
34.93.16.66
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇩🇪
207.154.247.73
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇺🇸
148.135.79.162
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇺🇸
173.249.144.45
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇮🇳
195.250.21.212
|
|
(mod_security) mod_security (id:210492) triggered by 195.250.21.212 (IN/India/598117-dogmasoft.cloud ...
show more
(mod_security) mod_security (id:210492) triggered by 195.250.21.212 (IN/India/598117-dogmasoft.cloudhostdns.net): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 17 13:15:01.537910 2025] [security2:error] [pid 2632895:tid 2632896] [remote 195.250.21.212:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mogs.lol"] [uri "/.env"] [unique_id "aMrslY0AJ2gxgUXH8sBwTgAADwA"]
show less
|
Hacking
|
|
🇺🇸
68.183.146.153
|
|
(mod_security) mod_security (id:210492) triggered by 68.183.146.153 (US/United States/-): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 68.183.146.153 (US/United States/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 17 12:58:54.867814 2025] [security2:error] [pid 2632626:tid 2632659] [client 68.183.146.153:37004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srv.mogbox.net"] [uri "/api/.git/config"] [unique_id "aMrozuvXDYRnnnhokFPFdwAAAEM"]
show less
|
Hacking
|
|
🇺🇸
50.30.32.22
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇮🇪
40.69.216.119
|
|
Web-based Attack: GET /wp-login.php?action=register HTTP/2.0
|
Hacking
Web App Attack
|
|
🇨🇳
36.41.75.167
|
|
(mod_security) mod_security (id:210350) triggered by 36.41.75.167 (CN/China/-): 1 in the last 3600 s ...
show more
(mod_security) mod_security (id:210350) triggered by 36.41.75.167 (CN/China/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 17 11:52:47.539775 2025] [security2:error] [pid 2632895:tid 2632937] [client 36.41.75.167:54762] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||fitchugs.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "fitchugs.com"] [uri "/"] [unique_id "aMrZT40AJ2gxgUXH8sBtaAAAAA8"]
show less
|
Hacking
|
|
🇳🇿
120.138.19.65
|
|
Web-based Attack: POST /xmlrpc.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇳🇱
196.251.115.16
|
|
Web-based Attack: GET /wp-login.php HTTP/2.0
|
Hacking
Web App Attack
|
|
🇸🇬
43.156.232.190
|
|
(mod_security) mod_security (id:210350) triggered by 43.156.232.190 (SG/Singapore/-): 1 in the last ...
show more
(mod_security) mod_security (id:210350) triggered by 43.156.232.190 (SG/Singapore/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 17 11:21:40.394013 2025] [security2:error] [pid 2632895:tid 2632924] [client 43.156.232.190:56026] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||209.59.154.179|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "209.59.154.179"] [uri "/"] [unique_id "aMrSBI0AJ2gxgUXH8sBstQAAAAI"]
show less
|
Hacking
|