🇺🇸
TPI-Abuse
2026-09-25 06:58:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 02:58:09.234310 2026] [security2:error] [pid 31246:tid 31246] [client 82.165.82.48:57804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gisur.com"] [uri "/.env"] [unique_id "arYbgXs4ekQrKxrLbNy98gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 05:12:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 01:12:36.158970 2026] [security2:error] [pid 7661:tid 7661] [client 82.165.82.48:37890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angeltarrac.com"] [uri "/.env"] [unique_id "arYCxP6K2WihpllnIWCqBgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:19:03
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:19:00.157558 2026] [security2:error] [pid 1340:tid 1340] [client 82.165.82.48:42612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sophcomp.com"] [uri "/wp-config.php.bak"] [unique_id "arLUpHwNAufo2Mf5OvIe_wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:26:19
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:26:13.482418 2026] [security2:error] [pid 8686:tid 8686] [client 82.165.82.48:34986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerusalem-korczak-home.com"] [uri "/wp-config.php.bak"] [unique_id "arK6NdQu1T-eLHlkHZfkrwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alboweb B.V.
2025-08-26 12:39:05
(1 year ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
2025-08-23 03:06:02
(1 year ago)
82.165.82.48 - - [23/Aug/2025:05:06:01 +0200] "HEAD /docs.zip HTTP/1.1" 403 124 "-" "-"
...
Web App Attack
🇺🇸
octageeks.com
2025-08-21 04:06:14
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇬🇧
myintarweb
2025-08-11 15:34:25
(1 year ago)
82.165.82.48 - - [18/Jul/2025:21:44:43 +0100] 80 "GET /wp-config.php_old HTTP/1.1" 301 1602 "-" "-"
...
show more
82.165.82.48 - - [18/Jul/2025:21:44:43 +0100] 80 "GET /wp-config.php_old HTTP/1.1" 301 1602 "-" "-"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇬🇧
myintarweb
2025-08-04 13:29:45
(1 year ago)
82.165.82.48 - - [18/Jul/2025:21:44:43 +0100] 80 "GET /wp-config.php_old HTTP/1.1" 301 1602 "-" "-"
...
show more
82.165.82.48 - - [18/Jul/2025:21:44:43 +0100] 80 "GET /wp-config.php_old HTTP/1.1" 301 1602 "-" "-"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
www.Examensfragen.de
2025-07-28 17:04:18
(1 year ago)
Web Spam
Bad Web Bot
🇺🇸
raymarron.com
2025-07-23 13:29:44
(1 year ago)
/wp-config
/wp-config.php.org
/wp-config.phpold
/wp-config.php1
Web App Attack
🇺🇸
TPI-Abuse
2025-07-20 05:14:57
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 20 01:14:51.001918 2025] [security2:error] [pid 21375:tid 21375] [client 82.165.82.48:58972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nealschonsautographedguitars.com"] [uri "/wp-config.php_old"] [unique_id "aHx7S9eRYaZ-_00Y4JcTHAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 21:35:27
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 17:35:23.889086 2025] [security2:error] [pid 11976:tid 11976] [client 82.165.82.48:41666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fitnessgearmagazine.com"] [uri "/wp-config.php_orig"] [unique_id "aHwPm-rtLzqkithFHF243AAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-19 18:21:19
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.82.48 (infong298.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 14:21:14.673635 2025] [security2:error] [pid 8690:tid 8690] [client 82.165.82.48:52956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dudleyanddudley.com"] [uri "/wp-config.php_orig"] [unique_id "aHviGrKN5sIcewCM3qNdXQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
myintarweb
2025-07-18 20:44:43
(1 year ago)
82.165.82.48 - - [18/Jul/2025:21:44:43 +0100] 80 "GET /wp-config.php_old HTTP/1.1" 301 1602 "-" "-"
...
show more
82.165.82.48 - - [18/Jul/2025:21:44:43 +0100] 80 "GET /wp-config.php_old HTTP/1.1" 301 1602 "-" "-"
...
show less
Hacking
Bad Web Bot
Web App Attack
