2026-10-18 07:01:05
(3 hours ago)
Web App Attack, Hacking
Hacking
Web App Attack
🇩🇪
Phenix Info
2026-09-25 13:47:16
(3 weeks ago)
SmallGuard.fr/Prestashop Empty User Agent
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 00:16:10
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 20:16:07.125678 2026] [security2:error] [pid 17201:tid 17287] [client 82.165.85.26:54652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metastrata.com"] [uri "/wp-config.php.bak"] [unique_id "arMaR65nHdB1zVGAofyxiQAAAhQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:14:01
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:13:56.370111 2026] [security2:error] [pid 26282:tid 26282] [client 82.165.85.26:47602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xtrl.com"] [uri "/wp-config.php.bak"] [unique_id "arLhhHUIoppr-yRLYiQK8gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 19:05:47
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 15:05:42.500594 2026] [security2:error] [pid 14367:tid 14367] [client 82.165.85.26:44716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leannebostwick.com"] [uri "/wp-config.php.bak"] [unique_id "arLRhny037mmGx-SeeZU7QAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:07:21
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:07:16.586986 2026] [security2:error] [pid 24666:tid 24666] [client 82.165.85.26:56072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rcjlawfirm.com"] [uri "/wp-config.php.bak"] [unique_id "arK1xAh24XeYHtAhEXN9sAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:06:49
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:06:41.574803 2026] [security2:error] [pid 24236:tid 24236] [client 82.165.85.26:57608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pierrevanier.com"] [uri "/wp-config.php.bak"] [unique_id "arKnkYd3EPwtF3zQPLfBwAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:33:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:33:52.702740 2026] [security2:error] [pid 9646:tid 9646] [client 82.165.85.26:33938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "todotex.com"] [uri "/wp-config.php.bak"] [unique_id "arKf4Foj9jqTEzeTOEaENAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-22 14:13:25
(3 weeks ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /wp-config.php.bak | 2026-09-22 14:13 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:52:50
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 82.165.85.26 (infongp-uk34.clienthosting.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:52:43.240242 2026] [security2:error] [pid 27139:tid 27139] [client 82.165.85.26:34062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebumans.com"] [uri "/wp-config.php.bak"] [unique_id "arKIK75SNL1FqR_9zh3_gAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-08-20 03:42:55
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
2025-08-12 19:08:29
(1 year ago)
Account archive download attempts
Hacking
Brute-Force
2025-08-12 00:03:49
(1 year ago)
Attempting to access restricted files
Hacking
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2025-08-09 14:32:04
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇩🇪
MF Network
2025-07-30 11:58:48
(1 year ago)
Bad Calls: Webpage scraping, Web App Attack
Bad Web Bot
Exploited Host
Web App Attack
