🇺🇸
TPI-Abuse
2026-11-15 07:50:43
UTC ·
(7 minutes ago)
(mod_security) mod_security (id:210492) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:50:37.861057 2026] [security2:error] [pid 7634:tid 7634] [client 82.197.202.147:63297] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:50:37.861057 2026] [security2:error] [pid 7634:tid 7634] [client 82.197.202.147:63297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgracetomastolentino.com"] [uri "/.env"] [unique_id "avlkTWZmjU0yE6v5NVefnQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 06:50:01
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:49:55.124432 2026] [security2:error] [pid 12268:tid 12268] [client 82.197.202.147:23209] ...
show more
(mod_security) mod_security (id:210492) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:49:55.124432 2026] [security2:error] [pid 12268:tid 12268] [client 82.197.202.147:23209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3dstores.com"] [uri "/.env"] [unique_id "avlWE2ZxNb3mPWZ6nDVYewAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-11-14 23:50:16
UTC ·
(8 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇫🇷
Derek Linz
2026-11-14 17:00:59
UTC ·
(14 hours ago)
Automated: web scanner probing exploit paths: /.env
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 14:54:41
UTC ·
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:53:35.999575 2026] [security2:error] [pid 25723:tid 25723] [client 82.197.202.147:40895] ...
show more
(mod_security) mod_security (id:210492) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:53:35.999575 2026] [security2:error] [pid 25723:tid 25723] [client 82.197.202.147:40895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unilabkenya.com"] [uri "/.env"] [unique_id "avh170G_tyTqQHrW7nXUkgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-14 07:47:31
UTC ·
(1 day ago)
(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 82.197.202.147 (LT/Lithuania/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇧🇪
cmbplf
2026-11-10 02:27:13
UTC ·
(5 days ago)
863 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
🇩🇪
YF
2026-10-26 03:30:21
UTC ·
(2 weeks ago)
Go HTTP client scanner
Web App Attack
🇸🇪
vaia.cloud
2026-10-09 19:45:01
UTC ·
(1 month ago)
crowdsecurity/http-wordpress-scan
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-27 20:05:03
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-09-18 14:36:56
UTC ·
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /xmlrpc.php | 2026-09-18 14:36 UTC
Bad Web Bot
🇨🇭
backslash
2026-09-07 00:06:07
UTC ·
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-09-06 23:59:39
UTC ·
(2 months ago)
[07/Sep/2026:02:59:39 +0300] -- 82.197.202.147 Ban reason: User-Agent Go-http-client
Bad Web Bot
Web App Attack
2026-09-06 23:07:43
UTC ·
(2 months ago)
82.197.202.147 - - [06/Sep/2026:20:07:36 -0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0" 444 0 "-" "Go-http-client/2.0"
82.197.202.147 - - [06/Sep/2026:20:07:37 -0300] "GET /wp-content/plugins/enhanced-text-widget/ ...
show more
82.197.202.147 - - [06/Sep/2026:20:07:36 -0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0" 444 0 "-" "Go-http-client/2.0"
82.197.202.147 - - [06/Sep/2026:20:07:37 -0300] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0" 444 0 "-" "Go-http-client/2.0"
82.197.202.147 - - [06/Sep/2026:20:07:42 -0300] "GET /wp-content/themes/news-portal/error.php HTTP/2.0" 444 0 "-" "Go-http-client/2.0"
...
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-06 04:15:29
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 00:15:24.799284 2026] [security2:error] [pid 27845:tid 27845] [client 82.197.202.147:46387] ...
show more
(mod_security) mod_security (id:225170) triggered by 82.197.202.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 00:15:24.799284 2026] [security2:error] [pid 27845:tid 27845] [client 82.197.202.147:46387] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.joeordie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.joeordie.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiOe3AQFClnawEpBj7fA-wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
