๐ฌ๐ง
openstrike.co.uk
2026-08-22 05:15:02
(50 minutes ago)
14 attacks on PHP URLs:
GET /wp-config.php.original HTTP/1.1
Web App Attack
๐ฉ๐ช
hchristo
2026-08-21 12:42:20
(17 hours ago)
[Fri Aug 21 14:42:13.225847 2026] [authz_core:error] [pid 10234:tid 10323] [client 43.248.243.231:33 ...
show more
[Fri Aug 21 14:42:13.225847 2026] [authz_core:error] [pid 10234:tid 10323] [client 43.248.243.231:33316] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/php.quick-space.de/.wp-config.php.swp
[Fri Aug 21 14:42:14.706812 2026] [authz_core:error] [pid 10234:tid 10307] [client 43.248.243.231:32913] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/php.quick-space.de/wp-config.old
[Fri Aug 21 14:42:16.212568 2026] [authz_core:error] [pid 10234:tid 10316] [client 43.248.243.231:32601] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/php.quick-space.de/wp-config.php.bak
[Fri Aug 21 14:42:16.709575 2026] [authz_core:error] [pid 10234:tid 10325] [client 43.248.243.231:33197] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/php.quick-space.de/wp-config.php.old
[Fri Aug 21 14:42:19.194879 2026] [authz_core:error] [pid 10234:tid 10304] [client
...
show less
Brute-Force
๐ฌ๐ง
consul.to
2026-08-21 11:28:39
(18 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ธ๐ช
KIDOS
2026-08-21 10:26:16
(19 hours ago)
IIS malicious activity: high_400_error_rate (100% of requests are 400 errors)
Web App Attack
๐ฉ๐ช
hchristo
2026-08-21 10:18:19
(19 hours ago)
[Fri Aug 21 12:18:13.100745 2026] [authz_core:error] [pid 60287:tid 60361] [client 43.248.243.231:33 ...
show more
[Fri Aug 21 12:18:13.100745 2026] [authz_core:error] [pid 60287:tid 60361] [client 43.248.243.231:33402] AH01630: client denied by server configuration: /usr/share/liveconfig/html/.wp-config.php.swp
[Fri Aug 21 12:18:14.578110 2026] [authz_core:error] [pid 60287:tid 60356] [client 43.248.243.231:33335] AH01630: client denied by server configuration: /usr/share/liveconfig/html/wp-config.old
[Fri Aug 21 12:18:16.046782 2026] [authz_core:error] [pid 60287:tid 60360] [client 43.248.243.231:32562] AH01630: client denied by server configuration: /usr/share/liveconfig/html/wp-config.php.bak
[Fri Aug 21 12:18:16.537719 2026] [authz_core:error] [pid 60287:tid 60376] [client 43.248.243.231:33330] AH01630: client denied by server configuration: /usr/share/liveconfig/html/wp-config.php.old
[Fri Aug 21 12:18:18.998800 2026] [authz_core:error] [pid 60287:tid 60358] [client 43.248.243.231:32989] AH01630: client denied by server configuration: /usr/share/liveconfig/html/wp-config.php.swp
...
show less
Brute-Force
๐ฉ๐ช
Hazzard
2026-08-21 10:03:40
(20 hours ago)
(PERMBLOCK) 43.248.243.231 (IN/India/National Capital Territory of Delhi/Delhi/reverse.anonet.in/[re ...
show more
(PERMBLOCK) 43.248.243.231 (IN/India/National Capital Territory of Delhi/Delhi/reverse.anonet.in/[redacted]) has had more than 4 temp blocks
show less
Hacking
๐บ๐ธ
kosada.com
2026-08-21 04:55:01
(1 day ago)
Web vulnerability probing: /wp-config.txt
Web App Attack
๐จ๐ญ
backslash
2026-08-21 03:03:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-21 02:49:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 43.248.243.231 (reverse.anonet.in): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 43.248.243.231 (reverse.anonet.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 22:49:02.514741 2026] [security2:error] [pid 32227:tid 32227] [client 43.248.243.231:32669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.antiradares.portalvasco.com"] [uri "/wp-config.php"] [unique_id "aoe8nqJzAZE9I3Xr6f-T2gAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
hchristo
2026-08-21 02:37:58
(1 day ago)
[Fri Aug 21 04:37:53.128403 2026] [authz_core:error] [pid 1580:tid 1647] [client 43.248.243.231:3270 ...
show more
[Fri Aug 21 04:37:53.128403 2026] [authz_core:error] [pid 1580:tid 1647] [client 43.248.243.231:32705] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/webspell.quick-space.de/.wp-config.php.swp
[Fri Aug 21 04:37:54.570119 2026] [authz_core:error] [pid 1580:tid 1655] [client 43.248.243.231:32604] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/webspell.quick-space.de/wp-config.old
[Fri Aug 21 04:37:56.008945 2026] [authz_core:error] [pid 1580:tid 1637] [client 43.248.243.231:32716] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/webspell.quick-space.de/wp-config.php.bak
[Fri Aug 21 04:37:56.486115 2026] [authz_core:error] [pid 1580:tid 1675] [client 43.248.243.231:32567] AH01630: client denied by server configuration: /var/www/hchristo/htdocs/quick-space.de/webspell.quick-space.de/wp-config.php.old
[Fri Aug 21 04:37:57.898606 2026] [authz_core:error] [pid 1580:tid 1648
...
show less
Brute-Force
Anonymous
2026-08-21 02:34:30
(1 day ago)
Aggressive web scan
Web App Attack
๐ธ๐ช
KIDOS
2026-08-20 23:59:11
(1 day ago)
CrowdSec detected malicious activity
DDoS Attack
Anonymous
2026-08-20 23:20:04
(1 day ago)
Bot / scanning and/or hacking attempts: GET /wp-config-sample.php HTTP/1.1, GET /wp-config.php.save ...
show more
Bot / scanning and/or hacking attempts: GET /wp-config-sample.php HTTP/1.1, GET /wp-config.php.save HTTP/1.1
show less
Hacking
Web App Attack
๐ฉ๐ช
Hazzard
2026-08-20 22:02:28
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ณ๐ฑ
e.fierstra
2026-08-20 21:30:29
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack