๐ฉ๐ช
LRob
2026-09-25 16:21:11
(3 weeks ago)
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it โ over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: /seed.txt | 2026-09-25 16:21 UTC
show less
Bad Web Bot
๐ฉ๐ช
BlueWire Hosting
2026-09-25 10:18:29
(3 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 09:57:29
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 05:57:22.934550 2026] [security2:error] [pid 7312:tid 7312] [client 62.84.245.183:52834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "versallis.com"] [uri "/.env"] [unique_id "arZFghoY4Y4rIcYHpzB7EAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-25 05:40:01
(3 weeks ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 05:14:40
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:14:33.118815 2026] [security2:error] [pid 24830:tid 24830] [client 62.84.245.183:41500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miyabi-classicalacupuncture.com"] [uri "/.env"] [unique_id "arYDOZ0hBqpxn92l3KEd_QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 13:45:46
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:45:42.964838 2026] [security2:error] [pid 661:tid 661] [client 62.84.245.183:54008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "njonker.com"] [uri "/wp-config.php.bak"] [unique_id "arKGhqiD2LPq2jiueeWDzAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 12:46:17
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:46:13.112854 2026] [security2:error] [pid 11290:tid 11290] [client 62.84.245.183:44686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "templeantiques.com"] [uri "/wp-config.php.bak"] [unique_id "arJ4ldTB76KcEFnv2DsM1gAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-08-21 23:34:13
(1 year ago)
Account archive download attempts
Hacking
Brute-Force
๐ซ๐ฎ
Mr-Money
2025-07-26 18:10:31
(1 year ago)
62.84.245.183 - - [26/Jul/2025:20:10:29 +0200] "HEAD /recht-pflicht/rechtsschutzversicherungarchive. ...
show more
62.84.245.183 - - [26/Jul/2025:20:10:29 +0200] "HEAD /recht-pflicht/rechtsschutzversicherungarchive.zip HTTP/2.0" 404 349 "-" "-"
62.84.245.183 - - [26/Jul/2025:20:10:29 +0200] "HEAD /recht-pflicht/rechtsschutzversicherungBackup.zip HTTP/2.0" 301 448 "-" "-"
62.84.245.183 - - [26/Jul/2025:20:10:29 +0200] "HEAD /recht-pflicht/rechtsschutzversicherungbackup.zip HTTP/2.0" 404 131 "-" "-"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-07-17 12:53:52
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 17 08:53:47.460966 2025] [security2:error] [pid 30096:tid 30096] [client 62.84.245.183:47210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idmadventures.com"] [uri "/wp-config.php.old"] [unique_id "aHjyW8eLaz3EXYKGJThM3QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
giulio gorobey
2025-07-16 16:02:09
(1 year ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.phpold
Web App Attack
๐ซ๐ท
giulio gorobey
2025-07-16 16:02:09
(1 year ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.php1
Web App Attack
๐บ๐ธ
TPI-Abuse
2025-07-11 17:28:45
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 62.84.245.183 (cnsevps1a.cnse.nl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 13:28:40.975420 2025] [security2:error] [pid 4963:tid 4963] [client 62.84.245.183:58270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gooch-excavation.com"] [uri "/wp-config.php.old"] [unique_id "aHFJyOLxoVUBYiRjAoTWkgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฏ๐ต
Valhalla
2025-07-11 03:41:36
(1 year ago)
/wp-config.php.old
Hacking
Web App Attack
๐ฎ๐น
VHosting
2025-07-10 05:40:50
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack