2025-12-08 17:02:48
(6 months ago)
Web attack
Bad Web Bot
Web App Attack
2025-05-17 01:35:10
(1 year ago)
Account archive download attempts
Hacking
Brute-Force
🇦🇺
crispi
2025-05-12 00:30:50
(1 year ago)
Unauthorized connection attempt detected from IP address 192.185.4.53 to TCP port 80
Port Scan
🇺🇸
TPI-Abuse
2025-05-10 13:46:30
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 10 09:46:25.176521 2025] [security2:error] [pid 1341187:tid 1341187] [client 192.185.4.53:50664] [client 192.185.4.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joecouttswoodsculptor.com"] [uri "/wp-config.php.bak"] [unique_id "aB9YsT-3FOue_8Gq5pfhhQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ecodehost.com
2025-05-10 11:39:01
(1 year ago)
Domain : ecodehost.com
Rule : config
2025-05-10 11:37:30 10.100.1.20 GET /wp-config.php.bak - 443 - ...
show more
Domain : ecodehost.com
Rule : config
2025-05-10 11:37:30 10.100.1.20 GET /wp-config.php.bak - 443 - 192.185.4.53 HTTP/2 - - ecodehost.com 404 0 2 1245 109 1706 - -
show less
Hacking
SQL Injection
🇸🇪
SkyDancer
2025-05-09 17:31:41
(1 year ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2025-05-09 12:40:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 09 08:40:29.074913 2025] [security2:error] [pid 3225516:tid 3225516] [client 192.185.4.53:49014] [client 192.185.4.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "i-dataph.com"] [uri "/wp-config.php~"] [unique_id "aB33vVaqF_2hr4GjqhJf6gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-09 02:38:01
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 22:37:54.201534 2025] [security2:error] [pid 3490576:tid 3490576] [client 192.185.4.53:16868] [client 192.185.4.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dodojuice.com"] [uri "/wp-config.php.old"] [unique_id "aB1qgsD30Q1JAEj9PlYQEQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-08 20:09:31
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 08 16:09:26.693246 2025] [security2:error] [pid 3185276:tid 3185276] [client 192.185.4.53:45828] [client 192.185.4.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trigonom.com"] [uri "/wp-config.php~"] [unique_id "aB0PdrPsvupgfVAZ_mRh8wAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2025-05-07 20:46:48
(1 year ago)
192.185.4.53 - - [07/May/2025:23:46:47 +0300] "GET /wp-config.php.bak HTTP/1.1" 404 276 "-" "-"
...
Web App Attack
🇺🇸
TPI-Abuse
2025-05-07 00:00:18
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 20:00:14.705965 2025] [security2:error] [pid 1957085:tid 1957085] [client 192.185.4.53:33882] [client 192.185.4.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schlegelcreative.com"] [uri "/wp-config.php_OLD"] [unique_id "aBqijhV4EV03DdfEW76TiwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-06 13:36:13
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 06 09:36:07.609033 2025] [security2:error] [pid 2600651:tid 2600651] [client 192.185.4.53:30200] [client 192.185.4.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamelalambert.com"] [uri "/wp-config.php-orig"] [unique_id "aBoQR_uGDCqh-eFfSEzdjAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-05-06 12:12:00
(1 year ago)
IPBlock protected site ID [669-fx].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2025-05-05 21:56:29
(1 year ago)
192.185.4.53 - - [06/May/2025:00:56:23 +0300] "GET /wp-config.php-bak HTTP/1.1" 404 281 "-" "-"
...
Web App Attack
🇺🇸
TPI-Abuse
2025-05-05 13:59:02
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 192.185.4.53 (gator4042.hostgator.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 09:58:56.317607 2025] [security2:error] [pid 1299589:tid 1299589] [client 192.185.4.53:45686] [client 192.185.4.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goseethenurse.com"] [uri "/wp-config.php-bak"] [unique_id "aBjEIEWUOAN0rV65JOZklgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack