🇨🇦
mitsurugi
2024-03-22 11:16:00
(2 years ago)
Probing for too many things.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-22 01:43:46
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 21:43:41.148222 2024] [security2:error] [pid 11541] [client 74.235.216.56:4139] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pswebsite.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZfziTfzmTDFxOt_wz9OWXAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-22 00:13:12
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 20:13:07.858448 2024] [security2:error] [pid 12331] [client 74.235.216.56:6353] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matchandmarry.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZfzNE-6s68kWRmyr3hIqVAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2024-03-21 23:38:32
(2 years ago)
(mod_security) mod_security (id:20000010) triggered by 74.235.216.56 (US/United States/-): 5 in the ...
show more
(mod_security) mod_security (id:20000010) triggered by 74.235.216.56 (US/United States/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇺🇸
rdpguard.com
2024-03-21 22:09:36
(2 years ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2024-03-21 21:10:22
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 17:10:18.496551 2024] [security2:error] [pid 28591] [client 74.235.216.56:2473] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.porcupinecreekalaska.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZfyiOhi4a9cnI0Jtgi0KagAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 20:18:35
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 16:18:27.887287 2024] [security2:error] [pid 16441] [client 74.235.216.56:3753] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nationalnova.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZfyWEw4aBzSFcIZpAdSPygAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DAILYKANBAN.COM
2024-03-21 19:58:40
(2 years ago)
(mod_security) mod_security (id:1000001) triggered by 74.235.216.56 (US/United States/-): 2 in the l ...
show more
(mod_security) mod_security (id:1000001) triggered by 74.235.216.56 (US/United States/-): 2 in the last 600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Mar 21 19:58:38.823365 2024] [security2:error] [pid 1665548:tid 22943499908864] [client 74.235.216.56:0] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/alfa-rex.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "9"] [id "1000001"] [msg "Restricted File Probe"] [data "Matched Data: /alfa-rex.php found within REQUEST_URI"] [severity "CRITICAL"] [tag "paranoia-level/2"] [hostname "magicalmysteryplanttour.group"] [uri "/alfa-rex.php"] [unique_id "ZfyRbjcVa5QJo0Dxf2dmEAAAAEA"]
[Thu Mar 21 19:58:39.038209 2024] [security2:error] [pid 1665568:tid 22943459985152] [client 74.235.216.56:0] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/ee.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [l
show less
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 19:13:40
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 15:13:36.971087 2024] [security2:error] [pid 20187] [client 74.235.216.56:3799] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.xcengineering.xyz"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZfyG4OUYtY-zGBkymTFHuAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 13:52:34
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 09:52:27.229123 2024] [security2:error] [pid 14646] [client 74.235.216.56:9281] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jbernsteinpc.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zfw7mwV4LGOWrFLPjDpz9wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 13:11:27
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 09:11:23.642527 2024] [security2:error] [pid 2608] [client 74.235.216.56:4366] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.xrsouthernsummit.org"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zfwx-_6X-Qzhl4sz_ht5KQAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 12:47:06
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 08:47:01.234393 2024] [security2:error] [pid 6143] [client 74.235.216.56:5727] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lejzerowicz.org"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZfwsRZmbu2gt0jDvMSDJUAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2024-03-21 11:20:30
(2 years ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 09:56:45
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:56:38.456144 2024] [security2:error] [pid 4611] [client 74.235.216.56:7523] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rentkase.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZfwEVush5QwdYWMCFBbUKwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2024-03-21 09:03:05
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 74.235.216.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 21 05:03:02.708686 2024] [security2:error] [pid 5891] [client 74.235.216.56:6050] [client 74.235.216.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rick18.cc"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zfv3xkXGIl1cnuHOWMnseQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack