🇺🇸
TPI-Abuse
2026-05-22 11:57:21
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:57:15.473148 2026] [security2:error] [pid 13531:tid 13531] [client 45.133.114.120:57033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dorismitchell.com.billymitchell.com"] [uri "/wp-config.txt"] [unique_id "ahBEm-0aUC8JdhRdZXXvngAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 21:21:37
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:21:30.756578 2026] [security2:error] [pid 706:tid 706] [client 45.133.114.120:24969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.garanta.co.bamedica.com"] [uri "/wp-config.bak"] [unique_id "ag4l2gakoHCn85jXG00zxAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 16:29:29
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:29:24.368515 2026] [security2:error] [pid 13985:tid 13988] [client 45.133.114.120:49535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "landmarkocchealth.com"] [uri "/.wp-config.php.swp"] [unique_id "ag3hZDHcs3iy05nsBHsgJAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-20 12:44:24
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:44:18.469861 2026] [security2:error] [pid 12080:tid 12080] [client 45.133.114.120:25265] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceren.kircali.net"] [uri "/wp-config.php.dist"] [unique_id "ag2sotpSy91FHsd5KDPY-QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-05-17 10:41:37
(1 month ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇧🇪
taivas.nl
2026-05-16 04:32:40
(1 month ago)
Many_bad_calls
Web App Attack
🇧🇪
taivas.nl
2026-05-15 11:02:12
(1 month ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-13 00:19:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.133.114.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 20:19:37.042274 2026] [security2:error] [pid 19375:tid 19375] [client 45.133.114.120:10069] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/wp-config.php.txt"] [unique_id "agPDmRYG475C3IMwVF4N-gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-05-01 02:58:59
(1 month ago)
(modsec_5030) ModSec 5030: API abuse from 45.133.114.120 (NL/The Netherlands/-): 1 in the last 3600 ...
show more
(modsec_5030) ModSec 5030: API abuse from 45.133.114.120 (NL/The Netherlands/-): 1 in the last 3600 secs (0-201)
show less
Hacking
🇨🇭
4server
2026-04-30 20:10:10
(1 month ago)
[ThuApr3022:10:03.5201522026][security2:error][pid4107202:tid4107590][client45.133.114.120:0]ModSecu ...
show more
[ThuApr3022:10:03.5201522026][security2:error][pid4107202:tid4107590][client45.133.114.120:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"mondo-it.ch\"][uri\"/wp-content/plugins/developer_flavor/readme.txt\"][unique_id\"afO3G3RkCKHvVzCgpm82VwAAABE\"]
show less
Hacking
Web App Attack
🇨🇭
backslash
2026-03-03 01:06:06
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot