2024-11-25 11:56:01
(1 year ago)
"main_page":"'nvOpzp; AND 1=1 O
SQL Injection
2024-08-27 16:57:50
(2 years ago)
Excessive crawling/scraping
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2024-08-27 06:50:06
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 27 02:49:56.146997 2024] [security2:error] [pid 22482:tid 22482] [client 198.98.183.142:1509] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "akramansari.com"] [uri "/wp-config.php"] [unique_id "Zs13FMDBLKUcSUT-7bObhQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-26 23:04:58
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 26 19:04:33.005439 2024] [security2:error] [pid 18831:tid 18844] [client 198.98.183.142:1887] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pgnow.com"] [uri "/wp-config.php"] [unique_id "Zs0KAfWL2OrHa96PALHxBQAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-22 09:30:09
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 22 05:30:01.893263 2024] [security2:error] [pid 30984:tid 30984] [client 198.98.183.142:2491] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "no9prod.com"] [uri "/wp-config.php"] [unique_id "ZscFGVL6yEj9AUK-a8cA0gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2024-08-21 19:30:01
(2 years ago)
SPAM - Bruteforce Attack - DDOS 3
Email Spam
Brute-Force
🇺🇸
rdpguard.com
2024-08-20 12:23:52
(2 years ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2024-08-18 10:41:10
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 18 06:41:03.658094 2024] [security2:error] [pid 21733:tid 21907] [client 198.98.183.142:1467] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "providencetheological.net"] [uri "/wp-config.php"] [unique_id "ZsHPv3IwgRFrbYNc8Jj64wAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-17 23:20:37
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 17 19:20:33.851976 2024] [security2:error] [pid 433:tid 433] [client 198.98.183.142:1975] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contractorspecializing.com"] [uri "/wp-config.php"] [unique_id "ZsEwQbCwzvb31bazbOnR-wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-16 12:10:57
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 16 08:10:50.329957 2024] [security2:error] [pid 17758:tid 17758] [client 198.98.183.142:2209] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nathangoldsteinartist.com"] [uri "/wp-config.php"] [unique_id "Zr9ByrQbf1WA__oyqUFmbgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2024-08-16 01:09:06
(2 years ago)
Scanning/Probing (98)
Request Overload (2328)
Brute-Force
Web App Attack
🇳🇱
Savvii
2024-08-15 22:55:21
(2 years ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-08-12 07:08:29
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 12 03:08:25.397208 2024] [security2:error] [pid 1923:tid 1923] [client 198.98.183.142:1901] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiantmessages.com"] [uri "/wp-config.php"] [unique_id "Zrm06Rg1k8fM4GxpzJ5VAgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2024-08-11 15:54:35
(2 years ago)
{"level":"info","ts":1723391668.6347797,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1723391668.6347797,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"198.98.183.142","remote_port":"1249","proto":"HTTP/1.1","method":"GET","host":"6hm4.status.updown.io","uri":"/.well-known/about.php","headers":{"User-Agent":["fasthttp"]}},"user_id":"","duration":0.000051207,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://6hm4.status.updown.io/.well-known/about.php"]}}
{"level":"info","ts":1723391668.8080604,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"198.98.183.142","remote_port":"1398","proto":"HTTP/1.1","method":"GET","host":"6hm4.status.updown.io","uri":"/simple.php","headers":{"User-Agent":["fasthttp"]}},"user_id":"","duration":0.000042642,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://6hm4.status.updown.io/simple.php"],"Content-Type":[]}}
{"level":"info","ts":1723391668.
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2024-08-10 07:42:26
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool. ...
show more
(mod_security) mod_security (id:210492) triggered by 198.98.183.142 (r-142-183-98-198.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 10 03:42:20.473083 2024] [security2:error] [pid 4253:tid 4253] [client 198.98.183.142:1416] [client 198.98.183.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ericadamsdesign.com"] [uri "/wp-config.php"] [unique_id "ZrcZ3EpAQv7XQYEgrqhSTQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack