🇮🇹
LTM
2024-04-12 06:20:01
(2 years ago)
IP/Port Scan
Port Scan
Brute-Force
🇺🇸
TPI-Abuse
2024-04-10 05:04:21
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 10 01:04:14.410863 2024] [security2:error] [pid 19726] [client 200.58.112.97:59606] [client 200.58.112.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarawagnergrants.com"] [uri "/wp-config.php"] [unique_id "ZhYdzoF6LOYoUwYdeFqxAQAAAAI"], referer: http://simplesite.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-10 01:28:07
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 09 21:28:03.211130 2024] [security2:error] [pid 24570] [client 200.58.112.97:49850] [client 200.58.112.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dianamead.com"] [uri "/wp-config.php"] [unique_id "ZhXrI-cOo8jV-tZJQwgKsAAAABI"], referer: http://simplesite.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-09 22:12:23
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 09 18:12:15.477071 2024] [security2:error] [pid 32634:tid 47153236444928] [client 200.58.112.97:55058] [client 200.58.112.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peterhansenranch.com"] [uri "/wp-config.php"] [unique_id "ZhW9P7woHo66ZDe3W_0D9wAAAMc"], referer: http://simplesite.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-04-09 19:22:14
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 200.58.112.97 (c205.dattaweb.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 09 15:22:07.132388 2024] [security2:error] [pid 8033] [client 200.58.112.97:45630] [client 200.58.112.97] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bouldercorporate.com"] [uri "/wp-config.php"] [unique_id "ZhWVXyAj5yUC6jQTggaBdAAAAAM"], referer: http://simplesite.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2024-04-03 01:00:21
(2 years ago)
Unauthorized login attempts [ accesslogs]
Brute-Force
🇪🇸
10dencehispahard SL
2023-05-02 19:32:34
(3 years ago)
Unauthorized login attempts [{'wp-content-404'}]
Brute-Force
🇩🇪
Createline
2023-05-01 16:34:49
(3 years ago)
Looking for vulnerable data files, plugins or themes
200.58.112.97 - - [01/May/2023:07:26:52 +0200] ...
show more
Looking for vulnerable data files, plugins or themes
200.58.112.97 - - [01/May/2023:07:26:52 +0200] "GET /wp-content/themes/twentytwenty/content.php.suspected HTTP/1.1" 301 282 "http://simplesite.com" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4" 290 587
show less
Web App Attack
🇧🇷
AC - Team
2023-05-01 12:38:22
(3 years ago)
200.58.112.97 - - [01/May/2023:09:38:25 -0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 40 ...
show more
200.58.112.97 - - [01/May/2023:09:38:25 -0300] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 493 "http://simplesite.com" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4"
...
show less
Hacking
Web App Attack
🇺🇸
octageeks.com
2023-05-01 04:08:43
(3 years ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
mnsf
2023-04-30 19:05:08
(3 years ago)
Too many Status 40X (11)
Brute-Force
Web App Attack