๐บ๐ฆ
URAN Publishing Service
2025-09-04 14:00:23
(1 year ago)
144.91.122.132 - - [04/Sep/2025:17:00:16 +0300] "GET /wp-config.php_ HTTP/1.1" 404 280 "-" "Mozilla/ ...
show more
144.91.122.132 - - [04/Sep/2025:17:00:16 +0300] "GET /wp-config.php_ HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Linux; Android 4.4.3; KFASWI Build/KTU84M) AppleWebKit/537.36 (KHTML, like Gecko) Silk/44.1.81 like Chrome/44.0.2403.128 Safari/537.36"
144.91.122.132 - - [04/Sep/2025:17:00:19 +0300] "GET /wp-config.php HTTP/1.1" 404 280 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
Gabriel Camargo
2025-09-04 10:13:13
(1 year ago)
144.91.122.132 - - [04/Sep/2025:05:13:11 -0500] "GET /_wpeprivate/config.json HTTP/1.1" 301 178 "-" ...
show more
144.91.122.132 - - [04/Sep/2025:05:13:11 -0500] "GET /_wpeprivate/config.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/7.0; 1ButtonTaskbar)"
144.91.122.132 - - [04/Sep/2025:05:13:12 -0500] "GET /wp-config.php_ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.59 Safari/537.36"
144.91.122.132 - - [04/Sep/2025:05:13:12 -0500] "GET /wp-config.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPad; CPU OS 8_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12D508 Safari/600.1.4"
...
show less
Brute-Force
SSH
Anonymous
2025-09-03 22:47:06
(1 year ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Hacking
Web App Attack
๐ณ๐ฑ
Roderic
2025-09-03 06:22:53
(1 year ago)
(apache_scanners-2) Failed apache-scanners trigger with match [redacted])
Port Scan
๐บ๐ฆ
URAN Publishing Service
2025-09-03 05:43:26
(1 year ago)
144.91.122.132 - - [03/Sep/2025:08:43:24 +0300] "GET /wp-config.php_ HTTP/1.1" 404 270 "-" "Mozilla/ ...
show more
144.91.122.132 - - [03/Sep/2025:08:43:24 +0300] "GET /wp-config.php_ HTTP/1.1" 404 270 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; EIE10;ENUSMSN; rv:11.0) like Gecko"
144.91.122.132 - - [03/Sep/2025:08:43:24 +0300] "GET /wp-config.php HTTP/1.1" 404 270 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36"
...
show less
Web App Attack
๐ช๐ธ
el-brujo
2025-09-02 17:04:09
(1 year ago)
02/Sep/2025:19:04:09.006231 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
02/Sep/2025:19:04:09.006231 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 144.91.122.132] ModSecurity: Warning. Matched phrase "wp-config.txt" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.txt found within REQUEST_FILENAME: /wp-config.txt"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ns2.elhacker.net"] [uri "/wp-config.txt"] [unique_id "aLcjiZ8IHqLogpEpPOLsEgAAAC0"]
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
Savvii
2025-09-02 00:28:06
(1 year ago)
20 attempts against mh-misbehave-ban on neon
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2025-09-01 23:17:36
(1 year ago)
144.91.122.132 - - [02/Sep/2025:02:17:35 +0300] "GET /wp-config.php_ HTTP/1.1" 404 275 "-" "Mozilla/ ...
show more
144.91.122.132 - - [02/Sep/2025:02:17:35 +0300] "GET /wp-config.php_ HTTP/1.1" 404 275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36"
144.91.122.132 - - [02/Sep/2025:02:17:35 +0300] "GET /wp-config.php HTTP/1.1" 404 275 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.154 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
snappic
2025-09-01 19:36:36
(1 year ago)
Scanning for config [GET /_wpeprivate/config.json] [Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; ...
show more
Scanning for config [GET /_wpeprivate/config.json] [Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B367 Safari/531.21.10]
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2025-08-31 19:26:57
(1 year ago)
20 attempts against mh-misbehave-ban on mist
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-08-31 16:28:15
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 144.91.122.132 (FR/France/vmi2664038.co ...
show more
(mod_security) mod_security triggered on hostname [redacted] 144.91.122.132 (FR/France/vmi2664038.contaboserver.net)
show less
SQL Injection
๐ญ๐บ
DumaNet
2025-08-31 10:57:00
(1 year ago)
WordPress (CMS) attack attempts.
Date: 2025 Aug 29. 20:38:38
Source IP: 144.91.122.132
Portion ...
show more
WordPress (CMS) attack attempts.
Date: 2025 Aug 29. 20:38:38
Source IP: 144.91.122.132
Portion of the log(s):
144.91.122.132 - [29/Aug/2025:20:38:36 +0200] "GET /wordpress/wp-config.php~ HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E; 360SE)"
144.91.122.132 - [29/Aug/2025:20:38:35 +0200] "GET /testdb.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.155 Safari/537.36"
144.91.122.132 - [29/Aug/2025:20:38:35 +0200] "GET /config.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
144.91.122.132 - [29/Aug/2025:20:38:34 +0200] "GET /config.php~ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.122 Safari/537.36 SE 2.X MetaSr 1.0"
144.91.122.132 - [29/Aug/2025:20:38:34 +0200] "GET /config
show less
Hacking
Web App Attack
๐ญ๐บ
DumaNet
2025-08-31 10:32:00
(1 year ago)
WordPress (CMS) attack attempts.
Date: 2025 Aug 29. 20:27:05
Source IP: 144.91.122.132
Portion ...
show more
WordPress (CMS) attack attempts.
Date: 2025 Aug 29. 20:27:05
Source IP: 144.91.122.132
Portion of the log(s):
144.91.122.132 - [29/Aug/2025:20:27:01 +0200] "GET /wp-config.php.orig HTTP/1.1" 404 555 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; GWX:QUALIFIED)"
144.91.122.132 - [29/Aug/2025:20:27:01 +0200] "GET /wp-config.php.save HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36"
144.91.122.132 - [29/Aug/2025:20:27:00 +0200] "GET /wp-config.old HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 5.0.1; SAMSUNG-SM-N910A Build/LRX22C) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/2.1 Chrome/34.0.1847.76 Mobile Safari/537.36"
144.91.122.132 - [29/Aug/2025:20:26:59 +0200] "GET /wp-config.php.saved HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 6.1) Apple
show less
Hacking
Web App Attack
Anonymous
2025-08-31 00:02:27
(1 year ago)
Aggressive web scan
SQL Injection
Bad Web Bot
Web App Attack
Anonymous
2025-08-30 18:12:44
(1 year ago)
Aggressive web scan
Web App Attack