Anonymous
2025-01-04 18:10:01
(1 year ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Hacking
SQL Injection
Web App Attack
๐ฌ๐ง
Apache
2024-12-23 23:22:34
(1 year ago)
(mod_security) mod_security (id:210410) triggered by 95.142.121.66 (US/United States/r-66-121-142-95 ...
show more
(mod_security) mod_security (id:210410) triggered by 95.142.121.66 (US/United States/r-66-121-142-95.consumer-pool.prcdn.net): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-12-23 23:08:15
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 95.142.121.66 (r-66-121-142-95.consumer-pool.pr ...
show more
(mod_security) mod_security (id:225170) triggered by 95.142.121.66 (r-66-121-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 23 18:08:08.500728 2024] [security2:error] [pid 28833:tid 28833] [client 95.142.121.66:1682] [client 95.142.121.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jolankagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z2ntWEn5bH-WLpiilbfIiwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ท
rtbh.com.tr
2024-12-04 20:52:55
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2024-10-09 20:53:52
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2024-09-26 20:54:17
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2024-09-23 20:54:23
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2024-09-22 20:54:24
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐ง๐ช
cmbplf
2024-09-21 01:23:08
(1 year ago)
2.960 requests to */xmlrpc.php
395 requests to */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐ณ๐ฑ
maxxsense
2024-07-13 06:20:25
(2 years ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 95.142.121.66 (US/United ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 95.142.121.66 (US/United States/r-66-121-142-95.consumer-pool.prcdn.net)
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2024-07-13 05:15:01
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 95.142.121.66 (r-66-121-142-95.consumer-pool.pr ...
show more
(mod_security) mod_security (id:210492) triggered by 95.142.121.66 (r-66-121-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 01:14:57.311308 2024] [security2:error] [pid 14428] [client 95.142.121.66:1262] [client 95.142.121.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hayrun.com"] [uri "/wp-config.php"] [unique_id "ZpINUZtDBErNdSIDuW7k5wAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-13 04:50:35
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 95.142.121.66 (r-66-121-142-95.consumer-pool.pr ...
show more
(mod_security) mod_security (id:210492) triggered by 95.142.121.66 (r-66-121-142-95.consumer-pool.prcdn.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 13 00:50:26.205288 2024] [security2:error] [pid 18232:tid 47826746742528] [client 95.142.121.66:1237] [client 95.142.121.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hayounglee.com"] [uri "/wp-config.php"] [unique_id "ZpIHksGATCGVlDmAynXl9QAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2024-07-10 00:20:15
(2 years ago)
1.007 requests to */xmlrpc.php
Brute-Force
Bad Web Bot
๐ช๐ธ
10dencehispahard SL
2024-04-20 10:00:04
(2 years ago)
Unauthorized login attempts [ wordpress-xmlrpc]
Brute-Force
Web App Attack
๐ซ๐ท
oonux.net
2024-04-12 04:01:25
(2 years ago)
RouterOS: The host 95.142.121.66 trying to use anonymous proxy
Hacking
Bad Web Bot
Exploited Host