🇳🇱
homeshowdomain.nl
2026-05-02 22:13:44
(5 months ago)
Auto-ban: 15 malicious requests on 2026-05-01 (e.g., env/backup probes, brute-force, or error bursts ...
show more
Auto-ban: 15 malicious requests on 2026-05-01 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇫🇷
SpaceHost-Server
2026-05-01 22:27:32
(5 months ago)
Brute-Force
Web App Attack
🇹🇭
thaizone.com
2026-05-01 08:14:24
(5 months ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-05-01 06:59:58
(5 months ago)
(mod_security) mod_security (id:234930) triggered by 109.123.239.114 (vmi2622929.contaboserver.net): ...
show more
(mod_security) mod_security (id:234930) triggered by 109.123.239.114 (vmi2622929.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:59:50.562009 2026] [security2:error] [pid 17595:tid 17595] [client 109.123.239.114:61119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||www.grasslakepizzatime.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.grasslakepizzatime.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afRPZubB9n8mRFByPzWUWwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-05-01 05:04:10
(5 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
agenciahypelab.com.br
2026-05-01 03:03:30
(5 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-05-01 01:03:50
(5 months ago)
(mod_security) mod_security (id:234930) triggered by 109.123.239.114 (vmi2622929.contaboserver.net): ...
show more
(mod_security) mod_security (id:234930) triggered by 109.123.239.114 (vmi2622929.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 21:03:46.655554 2026] [security2:error] [pid 4645:tid 4645] [client 109.123.239.114:54806] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||lukeschicago.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "lukeschicago.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afP78lL6qoB9Oayx7XKQnAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-04-30 22:26:05
(5 months ago)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-04-30 20:45:09
(5 months ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇨🇦
Mediashaker
2026-04-30 18:55:56
(5 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 109.123.239.114 (SG/Sing ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 109.123.239.114 (SG/Singapore/vmi2622929.contaboserver.net)
show less
Port Scan
2026-04-30 16:31:53
(5 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇩🇪
raph
2026-04-30 14:43:08
(5 months ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-04-30 11:39:31
(5 months ago)
Excessive 404/403 errors
Brute-Force
2026-04-30 11:31:25
(5 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇩🇪
macrob
2026-04-30 10:51:57
(5 months ago)
2026/04/30 10:51:55 [error] 3441957#3441957: *189978807 access forbidden by rule, client: 109.123.23 ...
show more
2026/04/30 10:51:55 [error] 3441957#3441957: *189978807 access forbidden by rule, client: 109.123.239.114, server: binixo.lk, request: "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0", host: "binixo.lk"
2026/04/30 10:51:55 [error] 3441959#3441959: *189978845 access forbidden by rule, client: 109.123.239.114, server: binixo.lk, request: "GET /wp-content/plugins/semrush/x.php HTTP/2.0", host: "binixo.lk"
2026/04/30 10:51:56 [error] 3441955#3441955: *189978860 access forbidden by rule, client: 109.123.239.114, server: binixo.lk, request: "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/2.0", host: "binixo.lk"
...
show less
Web App Attack