๐บ๐ธ
TPI-Abuse
2024-08-13 07:01:50
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 13 03:01:42.945415 2024] [security2:error] [pid 2585:tid 2585] [client 95.164.46.204:60790] [client 95.164.46.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/wp-config.txt"] [unique_id "ZrsE1nzKBEsSH_Nh_fKLLAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Steve
2024-08-07 20:35:21
(2 years ago)
SQL Injection Attempts
SQL Injection
Brute-Force
๐ฆ๐บ
MAGIC
2024-08-04 04:03:11
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐บ๐ธ
mawan
2024-08-03 15:38:23
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
Anonymous
2024-07-29 18:18:00
(2 years ago)
"Forceful Browsing"
Brute-Force
๐บ๐ธ
TPI-Abuse
2024-07-29 13:41:45
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 29 09:41:39.100078 2024] [security2:error] [pid 19927:tid 19927] [client 95.164.46.204:38154] [client 95.164.46.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "investorscalifornia.com"] [uri "/wp-config.phpa"] [unique_id "ZqecEy-0purdbj9JKS9TzAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-27 10:12:47
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 27 06:12:41.899276 2024] [security2:error] [pid 9199:tid 9199] [client 95.164.46.204:45790] [client 95.164.46.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "linuxforpoets.com"] [uri "/wp-config.phpc"] [unique_id "ZqTIGdrWLpHksQKgDFwfdwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-20 23:36:16
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 20 19:36:08.470167 2024] [security2:error] [pid 20352:tid 20352] [client 95.164.46.204:33216] [client 95.164.46.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elimer.com.ve"] [uri "/wp-config.phpOLD"] [unique_id "ZpxJ6K1_Ey6HdOlyBVfeHQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-07-19 18:10:21
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 95.164.46.204 (penpen.lsd.cat): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 19 14:10:15.369439 2024] [security2:error] [pid 8890:tid 8890] [client 95.164.46.204:32832] [client 95.164.46.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenaarunoceans.com"] [uri "/wp-config.phpOLD"] [unique_id "ZpqsBx8RHBRPkzHoIoO1pQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SpaceHost-Server
2024-07-18 00:07:50
(2 years ago)
95.164.46.204 - - [18/Jul/2024:02:07:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 ...
show more
95.164.46.204 - - [18/Jul/2024:02:07:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
95.164.46.204 - - [18/Jul/2024:02:07:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
95.164.46.204 - - [18/Jul/2024:02:07:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 221 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
show less
Hacking
Web App Attack
๐ฒ๐พ
Rizzy
2024-07-17 04:39:45
(2 years ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ซ๐ท
Kenshin869
2024-07-16 14:41:56
(2 years ago)
Wordpress unauthorized access attempt
Brute-Force
๐ซ๐ท
pm33
2024-07-16 09:31:20
(2 years ago)
Wordpress login attempts
Brute-Force
๐ฌ๐ง
Steve
2024-07-16 04:18:17
(2 years ago)
Abuse of XMLRPC
Brute-Force
Web App Attack
๐ฌ๐ง
Swiptly
2024-07-15 08:15:38
(2 years ago)
WordPress xmlrpc spam or enumeration
...
Web Spam
Bad Web Bot
Web App Attack