🇨🇭
backslash
2026-07-09 06:57:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇫🇷
Octopuce
2026-07-08 13:20:10
(2 months ago)
Aggressive web search of vulnerable pages: /wp-content/themes/builder-and-developer/inc/tgm/error.ph ...
show more
Aggressive web search of vulnerable pages: /wp-content/themes/builder-and-developer/inc/tgm/error.php /wp-content/themes/theme-check/theme-chec ...
show less
Web App Attack
🇩🇪
conseilgouz
2026-06-30 22:30:11
(2 months ago)
mae-21 : Rogue PHP files=>/adminer.php
Hacking
🇱🇻
garmtech.com
2026-06-30 16:49:57
(2 months ago)
Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇬🇧
SilverZippo
2026-06-30 14:50:38
(2 months ago)
Web App Attack
Web App Attack
🇺🇸
threatintelligence_bvc
2026-06-16 21:18:53
(3 months ago)
Brute-Force
🇫🇷
IRISIO
2026-06-08 10:15:33
(3 months ago)
scans/SQL injection/spam posts : 157 queries
Web App Attack
SQL Injection
🇫🇷
IRISIO
2026-06-08 08:02:05
(3 months ago)
scans/SQL injection/spam posts : 76 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-05-28 05:19:37
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 01:19:32.936618 2026] [security2:error] [pid 22599:tid 22599] [client 82.118.30.17:37939] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arzoma.com"] [uri "/.env.production"] [unique_id "ahfQZJvEXvPqI4VlaE5svwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-25 18:10:05
(3 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 17:40:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:40:21.376639 2026] [security2:error] [pid 8836:tid 8836] [client 82.118.30.17:21583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "auditleverage.com"] [uri "/.env.old"] [unique_id "ahSJhaKNB3RNWSfweMvcVAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 16:53:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 12:53:18.202990 2026] [security2:error] [pid 13045:tid 13045] [client 82.118.30.17:37201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystroke.info"] [uri "/.env.backup"] [unique_id "ahR-fs8ZRCqCUZ-Zd_EJsgAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 15:45:11
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 11:44:59.148935 2026] [security2:error] [pid 17313:tid 17313] [client 82.118.30.17:28881] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "techworksunlimited.com"] [uri "/.env.local"] [unique_id "ahRuew1fCrw1YgZq-YAbCQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 14:59:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:59:13.974900 2026] [security2:error] [pid 13483:tid 13483] [client 82.118.30.17:49839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yerevanpress.am"] [uri "/.env.old"] [unique_id "ahRjwR9Qo2i_weMlUBiplAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 14:32:59
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:32:53.805064 2026] [security2:error] [pid 8938:tid 8938] [client 82.118.30.17:29851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "venturecg.com"] [uri "/api/.env"] [unique_id "ahRdlY8l_xnDqmSuSfHh8QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack