🇺🇸
threatintelligence_bvc
2026-08-09 16:51:32
(1 week ago)
Brute-Force
🇺🇸
threatintelligence_bvc
2026-08-05 05:43:26
(2 weeks ago)
Brute-Force
🇹🇷
neron
2026-08-02 10:16:22
(2 weeks ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇨🇭
backslash
2026-07-09 06:06:05
(1 month ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇭
Origon
2026-07-09 04:57:37
(1 month ago)
http-wordpress-scan - IP: 82.118.30.9 - time="2026-07-09T06:57:37+02:00" level=info msg="(555f66b4f ...
show more
http-wordpress-scan - IP: 82.118.30.9 - time="2026-07-09T06:57:37+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress-scan by ip 82.118.30.9 (CZ/206092) : 4h ban on Ip 82.118.30.9" module=db
show less
Web App Attack
2026-07-08 12:05:04
(1 month ago)
PHP file probing detected by Fail2Ban
Web App Attack
🇱🇻
garmtech.com
2026-06-30 16:23:19
(1 month ago)
Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/adminer.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇬🇧
SilverZippo
2026-06-30 14:50:43
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
threatintelligence_bvc
2026-06-20 11:58:56
(2 months ago)
Brute-Force
🇫🇷
IRISIO
2026-06-08 10:24:57
(2 months ago)
scans/SQL injection/spam posts : 766 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-05-28 04:07:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 00:06:58.219068 2026] [security2:error] [pid 27560:tid 27560] [client 82.118.30.9:59267] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.serviciosjireh.cl"] [uri "/.env.prod"] [unique_id "ahe_Ys_6CggZFdeNMMlnJwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 17:14:34
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:14:27.373580 2026] [security2:error] [pid 11774:tid 11774] [client 82.118.30.9:33425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infolinkqr.com"] [uri "/.env.example"] [unique_id "ahSDc-5XVPmpe-kfGjyYmwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-25 15:45:17
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 82.118.30.9 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 82.118.30.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 11:45:04.301071 2026] [security2:error] [pid 17519:tid 17519] [client 82.118.30.9:21009] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "techworksunlimited.com"] [uri "/.env.staging"] [unique_id "ahRugKtF35F8FilkPJ0P8wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-05-25 11:32:02
(2 months ago)
[Mon May 25 21:32:01.169094 2026] [security2:error] [pid 120683] [client 82.118.30.9:54159] [client ...
show more
[Mon May 25 21:32:01.169094 2026] [security2:error] [pid 120683] [client 82.118.30.9:54159] [client 82.118.30.9] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.info"] [uri "/.env.example"] [unique_id "ahQzMRk4KNAIp1FSoKKrdAAAAAM"]
...
show less
Web App Attack
🇺🇸
chronos
2026-05-25 10:09:37
(2 months ago)
[AUTORAVALT][[25/05/2026 - 07:09:36 -03:00 UTC]
Attack from [82.118.30.9] Action: BLocKed
Hacking.. ...
show more
[AUTORAVALT][[25/05/2026 - 07:09:36 -03:00 UTC]
Attack from [82.118.30.9] Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions.
]
...
show less
Hacking
Web App Attack