🇳🇿
Tripwire
2025-06-05 21:21:21
UTC ·
(1 year ago)
Scanning for backup files - /archive.zip
Web App Attack
🇺🇸
TPI-Abuse
2025-05-01 00:25:30
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 20:25:27.270818 2025] [security2:error] [pid 18597:tid 18597] [client 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 30 20:25:27.270818 2025] [security2:error] [pid 18597:tid 18597] [client 83.166.133.57:50548] [client 83.166.133.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frightlibrary.org"] [uri "/wp-config.php1"] [unique_id "aBK_dwQhNxSkslzCPDYCrwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ipblock.com
2025-05-01 00:04:00
UTC ·
(1 year ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 18:43:24
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 14:43:06.147948 2025] [security2:error] [pid 15029:tid 15029] [client 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 14:43:06.147948 2025] [security2:error] [pid 15029:tid 15029] [client 83.166.133.57:42984] [client 83.166.133.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rainwaterconstruction.net"] [uri "/wp-config.phpold"] [unique_id "aBEdusVMfcKyTe8qcCXlbAAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 11:58:00
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 07:57:52.846118 2025] [security2:error] [pid 1767803:tid 1767803] [clie ...
show more
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 07:57:52.846118 2025] [security2:error] [pid 1767803:tid 1767803] [client 83.166.133.57:50488] [client 83.166.133.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10mostwantedfugitives.com"] [uri "/wp-config.php1"] [unique_id "aBC-wGFHCuh1WpCY8dUYsQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 10:48:45
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 06:48:39.398403 2025] [security2:error] [pid 15775:tid 15775] [client 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 06:48:39.398403 2025] [security2:error] [pid 15775:tid 15775] [client 83.166.133.57:50778] [client 83.166.133.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atmoorehealthcare.com"] [uri "/wp-config.phpold"] [unique_id "aBCuhxXzxzL4mJ74KAqZYgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 07:47:56
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 03:47:52.344314 2025] [security2:error] [pid 15273:tid 15273] [client 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 29 03:47:52.344314 2025] [security2:error] [pid 15273:tid 15273] [client 83.166.133.57:38548] [client 83.166.133.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hiddenhistory.info"] [uri "/wp-config.phpold"] [unique_id "aBCEKAu7IDdY9JyMiQXQ1QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-29 02:58:29
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 22:58:24.896171 2025] [security2:error] [pid 23974:tid 23974] [client 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 22:58:24.896171 2025] [security2:error] [pid 23974:tid 23974] [client 83.166.133.57:49022] [client 83.166.133.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ussmauryags16.org"] [uri "/wp-config.php.save"] [unique_id "aBBAUEG3AFNFRcAQ7u6HCgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2025-04-29 01:51:50
UTC ·
(1 year ago)
WordPress hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇪
ManagedStack
2025-04-28 22:43:24
UTC ·
(1 year ago)
Wordpress Attack
Web App Attack
🇺🇸
ipblock.com
2025-04-28 21:26:00
UTC ·
(1 year ago)
IPBlock protected site ID [4055-d][s=06].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-27 08:55:09
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 04:54:58.676142 2025] [security2:error] [pid 2548:tid 2630] [client 83. ...
show more
(mod_security) mod_security (id:210492) triggered by 83.166.133.57 (h2web350.infomaniak.ch): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 04:54:58.676142 2025] [security2:error] [pid 2548:tid 2630] [client 83.166.133.57:54774] [client 83.166.133.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "callaplusfirst.com"] [uri "/wp-config.php.save"] [unique_id "aA3w4j6uqJu3g0PubE503AAAApg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
yukon.ca
2025-04-27 05:16:25
UTC ·
(1 year ago)
WordPress Enforcement Protection: WordPress Sensitive System Files Information Disclosure
Port:80
Hacking
Exploited Host