2026-11-10 07:05:44
UTC ·
(4 days ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (27/60 min)'; Requests=27
Port Scan
2026-11-08 18:21:03
UTC ·
(5 days ago)
Bot / scanning and/or hacking attempts: GET /.wp-config.php.swn HTTP/1.1, GET /wp-config.php.tmp HTTP/1.1, GET /.wp-config.php.swp HTTP/1.1, GET /wp-config.php HTTP/1.1, GET /.wp-config.php.swo HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.p ...
show more
Bot / scanning and/or hacking attempts: GET /.wp-config.php.swn HTTP/1.1, GET /wp-config.php.tmp HTTP/1.1, GET /.wp-config.php.swp HTTP/1.1, GET /wp-config.php HTTP/1.1, GET /.wp-config.php.swo HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.php_ HTTP/1.1, GET /.wp-config.php.swm HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 15:58:22
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:58:17.470621 2026] [security2:error] [pid 21832:tid 21832] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 10:58:17.470621 2026] [security2:error] [pid 21832:tid 21832] [client 82.67.211.140:53238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webjemm.net"] [uri "/wp-config.php_"] [unique_id "autWGQhxa764OyWWlnbq6QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇹
Information Security
2026-11-04 11:33:35
UTC ·
(1 week ago)
Web App Attack
...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 11:00:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:00:14.072885 2026] [security2:error] [pid 11616:tid 11616] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:00:14.072885 2026] [security2:error] [pid 11616:tid 11616] [client 82.67.211.140:56118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web99.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "ausQPmYjLcVy9gbsvluCPQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 09:19:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 04:19:06.110812 2026] [security2:error] [pid 8875:tid 8875] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 04:19:06.110812 2026] [security2:error] [pid 8875:tid 8875] [client 82.67.211.140:51918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web87.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "aur4ivmFONuiH6UoWkOVKwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 05:46:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 00:46:17.106849 2026] [security2:error] [pid 20315:tid 20315] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 00:46:17.106849 2026] [security2:error] [pid 20315:tid 20315] [client 82.67.211.140:37654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web63.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "aurGqR1ybXankJpULOegXAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 04:20:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:20:46.850605 2026] [security2:error] [pid 15115:tid 15115] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:20:46.850605 2026] [security2:error] [pid 15115:tid 15115] [client 82.67.211.140:50758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web58.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "auqynoF7aEkukJWOi2-gQgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 21:02:08
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:02:02.239504 2026] [security2:error] [pid 6827:tid 6827] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:02:02.239504 2026] [security2:error] [pid 6827:tid 6827] [client 82.67.211.140:56380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web37.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "aupLygcnixkcoaOtvqf0MQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 15:05:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:05:48.777510 2026] [security2:error] [pid 28005:tid 28005] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:05:48.777510 2026] [security2:error] [pid 28005:tid 28005] [client 82.67.211.140:52946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web27.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "aun4TGbA82K3FthX62ZpqwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 14:19:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:19:19.141939 2026] [security2:error] [pid 4134:tid 4134] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 09:19:19.141939 2026] [security2:error] [pid 4134:tid 4134] [client 82.67.211.140:33382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web244.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "auntZ4C_QLKzI1N-tWzTiQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 11:29:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:29:26.078159 2026] [security2:error] [pid 13232:tid 13269] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:29:26.078159 2026] [security2:error] [pid 13232:tid 13269] [client 82.67.211.140:41398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web201.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "aunFli_xim_1IdMeL567_QAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 05:50:04
UTC ·
(1 week ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-11-03 04:45:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:45:21.240356 2026] [security2:error] [pid 2545:tid 2545] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:45:21.240356 2026] [security2:error] [pid 2545:tid 2545] [client 82.67.211.140:53566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web164.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "aulm4drPXn-7NX0tzTNhYQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 04:25:27
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:25:23.250902 2026] [security2:error] [pid 4579:tid 4579] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 82.67.211.140 (82-67-211-140.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:25:23.250902 2026] [security2:error] [pid 4579:tid 4579] [client 82.67.211.140:50412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web154.dnchosting.com"] [uri "/wp-config.php_"] [unique_id "auliM0Dn3dtNS0IUXmmXLwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
