|
๐บ๐ธ
technojoe99
|
|
Exploit scan from 82.165.84.43. HEAD /new.zip HTTP/1.1.
|
Web App Attack
|
|
|
Anonymous
|
|
82.165.84.43 - - [18/Aug/2025:16:08:39 +0200] "HEAD /docs.zip HTTP/1.1" 403 124 "-" "-"
...
|
Web App Attack
|
|
|
๐ง๐ช
Ivo Vynckier
|
|
82.165.84.43 - - [15/Aug/2025:21:26:05 +0200] "HEAD /new.zip HTTP/2.0" 404 0 "-" "-"
82.165.84.43 - ...
show more
82.165.84.43 - - [15/Aug/2025:21:26:05 +0200] "HEAD /new.zip HTTP/2.0" 404 0 "-" "-"
82.165.84.43 - - [15/Aug/2025:21:26:05 +0200] "HEAD /data.zip HTTP/2.0" 404 0 "-" "-"
82.165.84.43 - - [15/Aug/2025:21:26:05 +0200] "HEAD /temp.zip HTTP/2.0" 404 0 "-" "-"
82.165.84.43 - - [15/Aug/2025:21:26:06 +0200] "HEAD /old.zip HTTP/2.0" 404 0 "-" "-"
show less
|
Web App Attack
|
|
|
๐ฉ๐ช
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
|
Exploited Host
Web App Attack
|
|
|
๐ณ๐ฟ
Tripwire
|
|
Scanning for backup files - /archive.zip
|
Web App Attack
|
|
|
๐ฉ๐ช
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
|
Exploited Host
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 09:10:14.424768 2025] [security2:error] [pid 5429:tid 5429] [client 82.165.84.43:47026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotdamnsam.com"] [uri "/wp-config.php_orig"] [unique_id "aHuZNi6UcABfARV2o5xlUQAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 19 00:15:44.613199 2025] [security2:error] [pid 3210:tid 3210] [client 82.165.84.43:38942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southshorestreetrods.com"] [uri "/wp-config.php_orig"] [unique_id "aHsb8N9tFn3XVyZs3QLfeQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 18 08:23:28.034848 2025] [security2:error] [pid 27338:tid 27338] [client 82.165.84.43:56704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingfish.bet"] [uri "/wp-config.php1"] [unique_id "aHo8wPb8gLVvsWJyivL43QAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 04:02:16.507036 2025] [security2:error] [pid 30891:tid 30891] [client 82.165.84.43:38454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xn--lyngr-yua.net"] [uri "/wp-config.php1"] [unique_id "aHdciJPmzseOBA4sEp9f6gAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 16 01:54:24.747402 2025] [security2:error] [pid 16764:tid 16817] [client 82.165.84.43:58420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "poeticdialogues.com"] [uri "/wp-config.php1"] [unique_id "aHc-kNkM-PJ163daDqHOsAAAAE4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 15 05:23:23.337317 2025] [security2:error] [pid 28682:tid 28682] [client 82.165.84.43:47904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "femalestripperslaquinta.com"] [uri "/wp-config.php1"] [unique_id "aHYeCysiLNW9VHi-09K6QQAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Backdrop CMS module - malicious activity detected
|
Bad Web Bot
Web App Attack
|
|
|
๐ฉ๐ช
XICTRON
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.84.43 (infongp-de14.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 13 15:06:50.691348 2025] [security2:error] [pid 5704:tid 5704] [client 82.165.84.43:35370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.proprocessor.com"] [uri "/deerprocessingequipment.htm/wp-config.php.old"] [unique_id "aHQDyh7xiDH-n-GwvqiAyAAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|