🇧🇪
voormedia
2026-06-29 13:03:05
(1 week ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇺🇸
ph
2026-06-25 12:33:38
(1 week ago)
Bad web bot attempting to run wp-json on non-WP site
Hacking
Bad Web Bot
Web App Attack
🇸🇪
webbfabriken
2024-09-04 03:10:43
(1 year ago)
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbf ...
show more
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabiken Security API - WFSecAPI
show less
Web Spam
🇱🇹
NotACaptcha
2024-09-04 03:07:17
(1 year ago)
webserver:80 [04/Sep/2024] "GET /.json HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS ...
show more
webserver:80 [04/Sep/2024] "GET /.json HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
🇻🇳
Xuan Can
2024-09-03 19:01:37
(1 year ago)
(mod_security) mod_security (id:77317941) triggered by 192.101.67.69 (US/United States/-): 1 in the ...
show more
(mod_security) mod_security (id:77317941) triggered by 192.101.67.69 (US/United States/-): 1 in the last 3600 secs; Ports: 80,443; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 04 02:01:20.231894 2024] [security2:error] [pid 33816:tid 33952] [client 192.101.67.69:37127] [client 192.101.67.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^(androxgh0st|janc0xsec)$" at ARGS:0x[]. [file "/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/006_i360_custom.conf"] [line "430"] [id "77317941"] [msg "IM360 WAF: Laravel Apps Leaking Secrets exploit attempt||MV:androxgh0st||RSV:6.25||T:APACHE||"] [severity "CRITICAL"] [tag "service_custom"] [hostname "45.117.168.11"] [uri "/live_env"] [unique_id "ZtddAHQziZ49fTFEaat6cwAAAcU"]
show less
Brute-Force
SSH
🇺🇸
Starburst SysOp Team
2024-09-03 17:22:29
(1 year ago)
(mod_security-custom) mod_security (id:210492) triggered by 192.101.67.69 (US/United States/-): 1 in ...
show more
(mod_security-custom) mod_security (id:210492) triggered by 192.101.67.69 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [Tue Sep 03 17:22:21.144011 2024] [:error] [pid 34664:tid 34708] [client 192.101.67.69:24331] [client 192.101.67.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "5.161.77.139"] [uri "/.git/config"] [unique_id "ZtdFzbgGZTug-lnNn4TjTAAAANE"]
show less
Hacking
🇺🇸
TPI-Abuse
2024-07-05 16:56:35
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 192.101.67.69 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 192.101.67.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 05 12:56:32.252628 2024] [security2:error] [pid 29714] [client 192.101.67.69:60893] [client 192.101.67.69] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northwestarbor-culture.com"] [uri "/.env"] [unique_id "ZoglwP7ZuNZXJz-OC5uJOAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-14 18:50:05
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 192.101.67.69 (hosted-by.technox.com.tr): 1 in ...
show more
(mod_security) mod_security (id:225170) triggered by 192.101.67.69 (hosted-by.technox.com.tr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 14 13:49:57.090511 2023] [security2:error] [pid 21708] [client 192.101.67.69:10935] [client 192.101.67.69] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.modalsoftware.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.modalsoftware.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVPBVRMvHfucs6PfSkJXpQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2023-11-14 18:03:41
(2 years ago)
Login Too Frequent (10)
Brute-Force
Web App Attack
🇺🇸
Ba-Yu
2023-11-14 15:27:24
(2 years ago)
WordPress hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
2023-10-01 08:52:50
(2 years ago)
Aggressive web scan
Web App Attack
🇩🇪
niceshops.com
2023-07-29 00:01:15
(2 years ago)
Web Attack ([29/Jul/2023:01:20:02.603] GET /wp-login.php)
Web App Attack