🇦🇺
MAGIC
2024-02-08 01:01:22
(2 years ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
Donovan_DMC
2024-01-30 10:13:24
(2 years ago)
GET //wp-includes/css/buttons.css - 191.101.41.192 (Go-http-client/2.0)
[wp-includes]: WordPress Inc ...
show more
GET //wp-includes/css/buttons.css - 191.101.41.192 (Go-http-client/2.0)
[wp-includes]: WordPress Includes Scanner
show less
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2023-12-19 02:39:59
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
jcbriar
2023-12-18 19:36:33
(2 years ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 19:18:43
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 14:18:38.272688 2023] [security2:error] [pid 24352] [client 191.101.41.192:36185] [client 191.101.41.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bitcoinsubscribers.com"] [uri "/.env"] [unique_id "ZX9Jjmvcr5QZPe9mJE9EgwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 08:44:14
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 17 03:44:09.701116 2023] [security2:error] [pid 426] [client 191.101.41.192:60517] [client 191.101.41.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giggie.com"] [uri "/.env"] [unique_id "ZX602YrR1jPoV7SLfUk3pQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-12-17 01:00:05
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 16 19:59:58.341109 2023] [security2:error] [pid 19990] [client 191.101.41.192:52335] [client 191.101.41.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danielbrower.com"] [uri "/.env"] [unique_id "ZX5IDoA4M2LXEvtGjBL8ggAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2023-12-16 18:44:43
(2 years ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-admin/includes/themes.php
Web App Attack
🇺🇸
TPI-Abuse
2023-12-16 18:12:08
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 191.101.41.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 16 13:12:00.468072 2023] [security2:error] [pid 14491] [client 191.101.41.192:61917] [client 191.101.41.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daebakdesign.com"] [uri "/.env"] [unique_id "ZX3ocIQM5HTnR4Ccb09LMQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
LTM
2023-12-16 07:20:01
(2 years ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
2023-12-13 20:06:35
(2 years ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇳🇱
mawan
2023-12-06 16:12:21
(2 years ago)
Suspected of having performed illicit activity on AMS server.
Web App Attack
🇺🇸
mnsf
2023-11-23 07:05:11
(2 years ago)
Too many Status 40X (41)
Brute-Force
Web App Attack
2023-11-12 20:37:05
(2 years ago)
191.101.41.192 - - [12/Nov/2023:21:37:04 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux ...
show more
191.101.41.192 - - [12/Nov/2023:21:37:04 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
show less
Web App Attack
2023-10-05 15:54:00
(2 years ago)
"Scanning for multiple vulnerable file extensions and wp-login.php xmlrpc.php"
Web App Attack