🇸🇮
borisperc
2025-08-03 10:36:33
(11 months ago)
Web Spam
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-02-14 12:40:48
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 14 07:40:44.836717 2025] [security2:error] [pid 10890:tid 11002] [client 23.154.177.6:25086] [client 23.154.177.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "property-management-companies-chicago.com"] [uri "/wp-config.php.maj"] [unique_id "Z685zDaFv6erMminL8qSiwAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2025-02-10 02:20:59
(1 year ago)
DDoS Attack Layer 7 Silent Bot
DDoS Attack
🇺🇸
TPI-Abuse
2025-01-16 22:38:33
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 16 17:38:25.527911 2025] [security2:error] [pid 7707:tid 7707] [client 23.154.177.6:50172] [client 23.154.177.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amyisms.com"] [uri "/wp-config.php.new~"] [unique_id "Z4mKYdvAK4TBpck21JXykgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-15 22:23:16
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 15 17:23:10.956535 2025] [security2:error] [pid 792616:tid 792616] [client 23.154.177.6:15150] [client 23.154.177.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "convoyforkids.com"] [uri "/wp-config.php9"] [unique_id "Z4g1TkHcxGkjzt9VZ7M5PAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-01-14 10:31:46
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 14 05:31:41.038173 2025] [security2:error] [pid 3358081:tid 3358081] [client 23.154.177.6:17992] [client 23.154.177.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "braunhausmedia.com"] [uri "/wp-config.php7"] [unique_id "Z4Y9DemD-iXdvadsOvmAUAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dtorrer
2025-01-13 01:51:44
(1 year ago)
General vulnerability scan.
Port Scan
🇺🇸
Brent Wadleigh
2025-01-09 17:50:46
(1 year ago)
IP attempted SSH bruteforce on port 22. Detected and banned by CrowdSec.
Brute-Force
SSH
🇦🇺
ozisp.com.au
2025-01-08 01:17:00
(1 year ago)
null_null_<33>1736299017 [1:2522076:5761] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic ...
show more
null_null_<33>1736299017 [1:2522076:5761] ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic group 77 [Classification: Misc Attack] [Priority: 2] {TCP} 23.154.177.6:60776
show less
Open Proxy
🇺🇸
TPI-Abuse
2025-01-07 10:24:35
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 07 05:24:29.878545 2025] [security2:error] [pid 17856:tid 17856] [client 23.154.177.6:28236] [client 23.154.177.6] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||caribef.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caribef.com"] [uri "/backup.sql"] [unique_id "Z30A3Xhhq7i445huPPRmKwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
David Ferneding
2025-01-04 08:03:01
(1 year ago)
Part of large-scale ddos-attack, 133279 requests from this ip
DDoS Attack
🇦🇺
MAGIC
2025-01-04 00:03:10
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
Ba-Yu
2025-01-03 11:32:19
(1 year ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2025-01-01 10:37:15
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 01 05:37:11.306646 2025] [security2:error] [pid 1330:tid 1330] [client 23.154.177.6:38488] [client 23.154.177.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brianwhitty.com"] [uri "/wp-config.php___bak"] [unique_id "Z3Ua1xdRkunGCzCuq0srXgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-12-28 03:22:56
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 23.154.177.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 27 22:22:50.301060 2024] [security2:error] [pid 16005:tid 16012] [client 23.154.177.6:33438] [client 23.154.177.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.executiveconsultingpr.com"] [uri "/wp-config.php6"] [unique_id "Z29vCom-lezns3ckyLApVwAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack