๐ฉ๐ช
elm-st
2025-03-24 09:13:00
(1 year ago)
Multiple 404 requests
Brute-Force
Web App Attack
๐ฉ๐ช
Vegascosmetics
2025-03-22 22:50:54
(1 year ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2025-03-22 15:41:47
(1 year ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa02]
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-22 13:45:31
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 22 09:45:24.414794 2025] [security2:error] [pid 11546:tid 11546] [client 13.92.174.119:4565] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||infinite-e.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "infinite-e.com"] [uri "/Lisa/index.htm/images/stories/admin-post.php"] [unique_id "Z96-9NkDqpP71nTjRxsnsAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-22 12:50:50
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 22 08:50:46.997419 2025] [security2:error] [pid 17032:tid 17032] [client 13.92.174.119:3741] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.proprocessor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.proprocessor.com"] [uri "/deerprocessingequipment.htm/images/stories/admin-post.php"] [unique_id "Z96yJlVqhxfEOxNASj6-jAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-22 10:49:06
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 22 06:49:00.437193 2025] [security2:error] [pid 28949:tid 28949] [client 13.92.174.119:3250] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.ctrussell.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.ctrussell.us"] [uri "/ctrussell.html/images/stories/admin-post.php"] [unique_id "Z96VnAB1KWKpr-d-7VH9lgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-22 09:49:13
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 22 05:49:09.381608 2025] [security2:error] [pid 1742865:tid 1742865] [client 13.92.174.119:2727] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||backstore.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "backstore.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z96HlcKu45itzr4p0SE69AAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-22 09:22:23
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 22 05:22:17.349338 2025] [security2:error] [pid 23821:tid 23912] [client 13.92.174.119:2076] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.iamalibrarian.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.iamalibrarian.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z96BSblvMynvcPJJukIQ0QAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-22 09:04:45
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 22 05:04:41.508813 2025] [security2:error] [pid 6857:tid 6857] [client 13.92.174.119:2536] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||noscentpro.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "noscentpro.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z959Kci6DAbh1eG4w00w_gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2025-03-22 03:51:43
(1 year ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
FeG Deutschland
2025-03-22 03:40:51
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 7
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-03-22 02:29:18
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 21 22:29:11.490527 2025] [security2:error] [pid 30584:tid 30584] [client 13.92.174.119:1383] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.voodooshop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.voodooshop.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z94gd-YKmZWGhDqdB_vt2QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
taivas.nl
2025-03-22 02:02:12
(1 year ago)
Site scraper
Web App Attack
๐ง๐ช
cmbplf
2025-03-22 01:22:59
(1 year ago)
453 requests to */.well-known/pki-validation/*.php
247 requests to */.well-known/acme-challenge/*. ...
show more
453 requests to */.well-known/pki-validation/*.php
247 requests to */.well-known/acme-challenge/*.php
155 requests to */wp.php
52 requests to */wp-sigunq.php
show less
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2025-03-22 00:21:50
(1 year ago)
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 13.92.174.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 21 20:21:45.147782 2025] [security2:error] [pid 1736:tid 1775] [client 13.92.174.119:4234] [client 13.92.174.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||ramonagrapestomp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "ramonagrapestomp.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z94CmS_PJ4Rh0qtregXtbQAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack