2025-07-26 09:32:12
(11 months ago)
108.179.253.220 - - [26/Jul/2025:11:32:12 +0200] "HEAD /archive.zip HTTP/1.1" 403 124 "-" "-"
...
Web App Attack
2025-07-19 18:58:55
(11 months ago)
Open Source CMS Configuration File Requests
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-07-19 12:05:33
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 08:05:26.569539 2025] [security2:error] [pid 13659:tid 13659] [client 108.179.253.220:51418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scala-global.com"] [uri "/wp-config.php_old"] [unique_id "aHuKBr8V5BVp-bOwzsMDQgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2025-07-19 06:07:35
(11 months ago)
. Matched phrase "wp-config.php" at REQUEST_URI. (210492-123)
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 23:14:03
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 19:13:55.919012 2025] [security2:error] [pid 10437:tid 10437] [client 108.179.253.220:33220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gogitzit.com"] [uri "/wp-config.php_old"] [unique_id "aHrVMwh2PVsImDZlotuOPAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-07-17 15:46:33
(11 months ago)
Bot / scanning and/or hacking attempts: GET /wp-config.php.org HTTP/2.0, [1/1] done, GET /wp-config ...
show more
Bot / scanning and/or hacking attempts: GET /wp-config.php.org HTTP/2.0, [1/1] done, GET /wp-config HTTP/2.0, GET /wp-config HTTP/1.1, GET /wp-config.phpold HTTP/1.1, GET /wp-config.phpold HTTP/2.0, GET /wp-config.php1 HTTP/2.0, GET /wp-config.php.org HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-07-17 11:14:17
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 07:14:12.186737 2025] [security2:error] [pid 5957:tid 5957] [client 108.179.253.220:15286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marshvineyards.com"] [uri "/wp-config.php1"] [unique_id "aHjbBPi-cqYYv1rEtOasjgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-17 00:50:52
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-16 16:28:58
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 12:28:53.334211 2025] [security2:error] [pid 27844:tid 27844] [client 108.179.253.220:27134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewarmachineguns.com"] [uri "/wp-config.php.old"] [unique_id "aHfTRfu1JReRMDWmTpXeewAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-07-16 07:10:51
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇮🇹
VHosting
2025-07-15 20:10:51
(11 months ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-07-13 20:18:27
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 16:18:22.485089 2025] [security2:error] [pid 3391:tid 3391] [client 108.179.253.220:33794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitetaildetailing.com"] [uri "/wp-config.php.old"] [unique_id "aHQUjgjOejaXc0McCX1ZMgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2025-07-13 15:09:24
(11 months ago)
Scanning for exploits - /wp-config.php1
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 18:32:00
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 14:31:54.521971 2025] [security2:error] [pid 4073:tid 4073] [client 108.179.253.220:57870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frank-klimas.com"] [uri "/wp-config.php.old"] [unique_id "aHKqGud3PmjRl_uC2ODccwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 21:41:51
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 108.179.253.220 (br606.hostgator.com.br): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 17:41:43.999370 2025] [security2:error] [pid 13505:tid 13505] [client 108.179.253.220:18106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "engineeringarts.com"] [uri "/wp-config.php1"] [unique_id "aHAzl1E15MuWLT_SpiC_CgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack