|
๐ซ๐ฎ
JimArchon72
|
|
2026/07/09 13:01:22 "GET /wp-login.php?action=register HTTP/1.1"
|
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 06:53:54.660088 2026] [security2:error] [pid 31429:tid 31429] [client 31.134.3.236:41313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.groovedoctors.com"] [uri "/wp-config.bak"] [unique_id "ahA1wmo1XcJ6Z9vdoM3vkwAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 13:59:07.626386 2026] [security2:error] [pid 29023:tid 29023] [client 31.134.3.236:26289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hodlmoser.com"] [uri "/.wp-config.php.swp"] [unique_id "ag32a617Ci4xADBacmKu0gAAAB8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:14:31.610260 2026] [security2:error] [pid 2006:tid 2032] [client 31.134.3.236:26213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosurelandscapers.com"] [uri "/wp-config.php.bak"] [unique_id "ag3d57ivRSlOQEQkq_kHZgAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:25:56.560960 2026] [security2:error] [pid 25216:tid 25216] [client 31.134.3.236:60013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mchen-arch.com"] [uri "/wp-config.txt"] [unique_id "ag2oVOExBXsxXbEKJrXJ7gAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.3.236 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 23:01:11.913272 2026] [security2:error] [pid 16271:tid 16341] [client 31.134.3.236:27615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plumeraproductions.com"] [uri "/wp-config.php.save"] [unique_id "ag0j98-4qO_hlkfw-KjHFgAAAYM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
nationaleventpros.com
|
|
vulnerability scan
|
Web App Attack
|
|
|
๐ช๐ธ
masterguru
|
|
Too much 404 requests in 1 hour. Operator GE matched 50 at IP:block_script. (44020-123)
|
Hacking
|
|
|
๐ซ๐ท
masterguru
|
|
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
|
Hacking
Web App Attack
|
|
|
๐บ๐ธ
antlac1
|
|
crowdsecurity/http-wordpress_wpconfig
|
Brute-Force
Web App Attack
|
|
|
๐ฉ๐ช
LRob
|
|
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
|
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
nationaleventpros.com
|
|
WordPress login attempt
|
Brute-Force
|
|
|
๐ฌ๐ง
relianoid.com
|
|
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
|
Web Spam
|
|