🇷🇺
avaio-media
2025-07-20 05:44:26
(1 year ago)
Brute-Force
🇺🇸
TPI-Abuse
2025-07-19 12:19:03
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 08:18:55.194514 2025] [security2:error] [pid 15354:tid 15354] [client 162.244.95.11:59700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "animz.com"] [uri "/wp-config.php_old"] [unique_id "aHuNL9s26ZvWDhMkmuWwbgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kais-universum.de
2025-07-19 03:05:02
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2025-07-18 04:13:21
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 00:13:17.589579 2025] [security2:error] [pid 19817:tid 19817] [client 162.244.95.11:45842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intrinsicreef.com"] [uri "/wp-config.php.orig"] [unique_id "aHnJ3U_zxrLekHLPIYnOLQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-18 01:41:07
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 21:41:03.164497 2025] [security2:error] [pid 29115:tid 29115] [client 162.244.95.11:55012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boat-registration-st-vincent-grenadines.com"] [uri "/wp-config.php.old"] [unique_id "aHmmL66c7EtQc7Yw_KUjJQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 20:47:12
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 16:47:09.865220 2025] [security2:error] [pid 21622:tid 21622] [client 162.244.95.11:32994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powdercoatovens.net"] [uri "/wp-config.php.orig"] [unique_id "aHLJzQZxJgfSpeLut9tbRAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-12 07:42:43
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 03:42:38.143939 2025] [security2:error] [pid 19891:tid 19891] [client 162.244.95.11:38684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tgdingenieria.com"] [uri "/wp-config.php.old"] [unique_id "aHIR7gaYy8noejLb-E4ftgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-11 18:35:37
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 14:35:33.812504 2025] [security2:error] [pid 9064:tid 9064] [client 162.244.95.11:56532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "floridausa.com"] [uri "/8news/wp-config.php1"] [unique_id "aHFZdXJhjriyIyiRpzDqKAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-11 02:53:31
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 22:53:25.838900 2025] [security2:error] [pid 31823:tid 31823] [client 162.244.95.11:37078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bidsonlineauctions.com"] [uri "/wp-config.php.old"] [unique_id "aHB8paewDHIDiYk6ESBy_wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-10 18:11:21
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 10 14:11:17.819048 2025] [security2:error] [pid 32154:tid 32154] [client 162.244.95.11:52838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "impressionista.net"] [uri "/wp-config.php1"] [unique_id "aHACRWmwfFS7pKPLyFlChgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
snappic
2025-07-10 09:57:18
(1 year ago)
Malicious URI path & NULL user agent [GET /wp-config.php1] [NULL user agent]
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-09 10:26:31
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 09 06:26:27.099326 2025] [security2:error] [pid 6951:tid 7011] [client 162.244.95.11:34390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexlogic.com"] [uri "/wp-config.php.old"] [unique_id "aG5D09WlTnubdp3VI7QQ2QAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2025-07-08 08:45:16
(1 year ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2025-07-07 23:39:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 19:39:28.264418 2025] [security2:error] [pid 9921:tid 9921] [client 162.244.95.11:35438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aholsniffsglue.com"] [uri "/wp-config.php.old"] [unique_id "aGxasKPM6iC1SmBWIH6YUQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-07 17:50:36
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 162.244.95.11 (uk-shared01.dapanel.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 07 13:50:28.496605 2025] [security2:error] [pid 4236:tid 4236] [client 162.244.95.11:42944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "justiart.com"] [uri "/wp-config.php_"] [unique_id "aGwI5CFYBWSEOuvDQ2HZKAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack