๐บ๐ธ
TPI-Abuse
2026-05-22 11:57:22
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:57:16.282507 2026] [security2:error] [pid 14025:tid 14025] [client 45.147.232.129:24593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billymitchell.com"] [uri "/wp-config.php.orig"] [unique_id "ahBEnGQySshwMpm_dKsfjAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-22 10:52:39
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 06:52:33.338610 2026] [security2:error] [pid 25124:tid 25124] [client 45.147.232.129:13993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinebrookdesign.com"] [uri "/wp-config.bak"] [unique_id "ahA1cfuOcmXg6oN6r5gMVAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-20 04:31:32
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.147.232.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.147.232.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 00:31:24.817769 2026] [security2:error] [pid 24859:tid 24859] [client 45.147.232.129:65231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plazahacienda.com"] [uri "/wp-config.php.old"] [unique_id "ag05HC3Ov-PmwN76duQ6QgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
yvoictra
2026-05-17 03:48:48
(3 weeks ago)
45.147.232.129 - - [17/May/2026:05:48:45 +0200] "HEAD /wp-content/plugins/classic-editor/readme.txt ...
show more
45.147.232.129 - - [17/May/2026:05:48:45 +0200] "HEAD /wp-content/plugins/classic-editor/readme.txt HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
45.147.232.129 - - [17/May/2026:05:48:45 +0200] "HEAD /wp-content/plugins/google-analytics-for-wordpress/readme.txt HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
45.147.232.129 - - [17/May/2026:05:48:45 +0200] "HEAD /wp-content/plugins/jetpack/readme.txt HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
45.147.232.129 - - [17/May/2026:05:48:45 +0200] "HEAD /wp-content/plugins/modula-best-grid-gallery/readme.txt HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
45.147.232.129 - - [17/May/2026:05:48:45 +0200] "HEAD /wp-content/plugins/woocommerce/readme.txt HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/201
...
show less
Brute-Force
Web App Attack
Anonymous
2026-04-17 11:25:00
(1 month ago)
Exceeded the maximum global requests per minute for crawlers or humans.
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-01-27 06:25:32
(4 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.27 is noted in report tim ...
show more
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.27 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
2025-12-20 03:59:38
(5 months ago)
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.20 is noted in report tim ...
show more
Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.20 is noted in report timestamp
show less
Hacking
Brute-Force
๐บ๐ธ
IT Support
2025-10-28 16:01:00
(7 months ago)
Hacking
Brute-Force
๐ฎ๐ฉ
Burayot
2025-10-20 16:51:11
(7 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.147.232.129 (US/United States/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 45.147.232.129 (US/United States/-): 1 in the last 3600 secs
show less
Web App Attack