🇺🇸
TPI-Abuse
2025-05-03 22:31:41
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 18:31:36.913200 2025] [security2:error] [pid 3657365:tid 3657365] [client 129.232.205.210:46752] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diamondtrailerserv.com"] [uri "/wp-config.php-old"] [unique_id "aBaZSDatTvIoHUKhUq16GwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-03 18:12:11
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 14:12:06.682095 2025] [security2:error] [pid 156828:tid 156828] [client 129.232.205.210:43422] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misscharlottemusic.com"] [uri "/wp-config.php-old"] [unique_id "aBZcdlFVqyQEcm4Ed1xKYQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-05-03 08:50:00
(1 year ago)
IPBlock protected site ID [4055-d][s=08].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-04-29 03:31:00
(1 year ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Rip
2025-04-29 02:59:43
(1 year ago)
Automated reconnaissance attempt targeting restricted or sensitive paths.
...
Brute-Force
Web App Attack
🇩🇪
Trueforce Threat Report
2025-04-28 12:34:17
(1 year ago)
Automated report, trolling for resource vulnerabilities
Bad Web Bot
Web App Attack
🇦🇺
filthywombat
2025-04-28 02:05:00
(1 year ago)
PHP crap.
Web Spam
Hacking
Web App Attack
🇳🇿
Tripwire
2025-04-27 04:33:31
(1 year ago)
Scanning for exploits - /wp-config.php.save
Web App Attack
🇺🇸
TPI-Abuse
2025-04-25 21:01:42
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 25 17:01:36.497513 2025] [security2:error] [pid 3821910:tid 3821910] [client 129.232.205.210:58736] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evannine.com"] [uri "/wp-config.php.bkp"] [unique_id "aAv4MCAPj75NyY1OHjvxigAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-25 04:23:04
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 25 00:22:56.228088 2025] [security2:error] [pid 16775:tid 16775] [client 129.232.205.210:48504] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starfrontiers.com"] [uri "/wp-config.php.backup"] [unique_id "aAsOIBYPvz_TLBSKqZ95VQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-25 01:31:26
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210730) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 24 21:31:19.521702 2025] [security2:error] [pid 1810:tid 1810] [client 129.232.205.210:35592] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||crep-psych.org|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "crep-psych.org"] [uri "/wp-config.backup"] [unique_id "aArl57gI2cX7yogoqy4KMAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-23 10:45:49
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210730) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 06:45:43.980878 2025] [security2:error] [pid 21865:tid 21865] [client 129.232.205.210:60870] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||plaisance.us|F|2"] [data ".backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "plaisance.us"] [uri "/wp-config.backup"] [unique_id "aAjE14TRg7xqGRw-bu-fLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-23 07:27:43
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 23 03:27:36.034405 2025] [security2:error] [pid 3996886:tid 3996886] [client 129.232.205.210:54838] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacmechanalysis.com"] [uri "/wp-config.php.backup"] [unique_id "aAiWaF7GZbd8YsZHPEzLbAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-04-23 01:03:00
(1 year ago)
IPBlock protected site ID [4055-d][s=02].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-22 21:48:45
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo ...
show more
(mod_security) mod_security (id:210492) triggered by 129.232.205.210 (210.176.232.129.reverse.xneelo.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 22 17:48:40.102959 2025] [security2:error] [pid 3972943:tid 3972943] [client 129.232.205.210:49952] [client 129.232.205.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/wp-config.old"] [unique_id "aAgOuF5QjgLv-fQqk62W-AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack