🇹🇷
neron
2026-08-02 12:16:22
(3 weeks ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇪🇸
librebit
2026-07-11 12:05:04
(1 month ago)
Brute force
Brute-Force
🇨🇭
backslash
2026-07-09 06:06:04
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇭
filou812
2026-07-02 17:42:26
(1 month ago)
url tried is "/adminer.php"
Web App Attack
🇱🇻
garmtech.com
2026-06-30 16:23:16
(1 month ago)
Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇫🇷
IRISIO
2026-06-08 10:15:58
(2 months ago)
scans/SQL injection/spam posts : 112 queries
Web App Attack
SQL Injection
🇫🇷
IRISIO
2026-06-08 08:02:36
(2 months ago)
scans/SQL injection/spam posts : 109 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-05-28 02:28:08
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 22:28:05.673231 2026] [security2:error] [pid 16430:tid 16449] [client 82.118.30.41:27369] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.doorways.dk"] [uri "/.env.prod"] [unique_id "aheoNVXOtXtksP-uY3R3ZQAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 17:40:28
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:40:21.010543 2026] [security2:error] [pid 1676:tid 1676] [client 82.118.30.41:46511] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "auditleverage.com"] [uri "/.env.example"] [unique_id "ahSJhQLyNvY51YSu5ZmKrAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 17:14:34
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:14:27.067849 2026] [security2:error] [pid 12571:tid 12571] [client 82.118.30.41:26075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infolinkqr.com"] [uri "/.env.backup"] [unique_id "ahSDc84b3AmjHuXCvWDcbwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-25 16:04:31
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 14:45:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:45:00.270376 2026] [security2:error] [pid 19647:tid 19647] [client 82.118.30.41:35457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jedaenterprises.com"] [uri "/backend/.env"] [unique_id "ahRgbBta0XDEGiQ-8QU_HQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-05-25 12:37:14
(3 months ago)
[Mon May 25 22:37:14.317060 2026] [security2:error] [pid 123033] [client 82.118.30.41:22105] [client ...
show more
[Mon May 25 22:37:14.317060 2026] [security2:error] [pid 123033] [client 82.118.30.41:22105] [client 82.118.30.41] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "rjryanpartners.com.au"] [uri "/app/.env"] [unique_id "ahRCejcFJdyTfAJ9Te6eSAAAAAE"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-05-25 11:32:02
(3 months ago)
[Mon May 25 21:32:02.041440 2026] [security2:error] [pid 111197] [client 82.118.30.41:35653] [client ...
show more
[Mon May 25 21:32:02.041440 2026] [security2:error] [pid 111197] [client 82.118.30.41:35653] [client 82.118.30.41] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.info"] [uri "/.env.old"] [unique_id "ahQzMsJP5N3c4ejXsMd8GAAAAAs"]
...
show less
Web App Attack
2026-05-14 17:01:02
(3 months ago)
Malicious activity detected
Hacking
Web App Attack