🇳🇱
jjnxpct
2025-12-19 04:50:39
UTC ·
(10 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /wordpress/wp-admin/setup-config.php (Rule ID: 930130) - Restricted File Access Attempt
Hacking
Web App Attack
🇺🇸
kosada.com
2025-12-18 14:05:33
UTC ·
(10 months ago)
Web vulnerability probing: /function/function.php
Web App Attack
🇩🇪
stinpriza
2025-12-18 12:24:32
UTC ·
(10 months ago)
Web App Attack
Web App Attack
🇳🇱
Mangelot Hosting
2025-12-18 11:52:20
UTC ·
(10 months ago)
(upload_shell) srv103 Shell upload 147.93.157.235 (SG/Singapore/vmi2811911.contaboserver.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇫🇷
dynamix
2025-12-18 07:21:37
UTC ·
(10 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2025-12-18 05:50:40
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 18 00:50:35.140910 2025] [security2:error] [pid 19011:tid 19011] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 18 00:50:35.140910 2025] [security2:error] [pid 19011:tid 19011] [client 147.93.157.235:54262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "speedgo.mx"] [uri "/wp-config.php"] [unique_id "aUOWK7cVcmCkIfo1kEMUJAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2025-12-18 05:39:15
UTC ·
(10 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-12-18 04:21:12
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 23:21:07.379214 2025] [security2:error] [pid 15958:tid 15958] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 23:21:07.379214 2025] [security2:error] [pid 15958:tid 15958] [client 147.93.157.235:60617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prospecinspections.com"] [uri "/wp-config.php"] [unique_id "aUOBMz-qSg2lMWJvX_UbKgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-18 03:29:48
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 22:29:41.348768 2025] [security2:error] [pid 29161:tid 29161] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 22:29:41.348768 2025] [security2:error] [pid 29161:tid 29161] [client 147.93.157.235:63360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jangamble.com"] [uri "/wp-config.php"] [unique_id "aUN1JWxvzypbPX3TmOXYrgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-18 01:56:23
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 20:56:18.860804 2025] [security2:error] [pid 1626:tid 1626] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 20:56:18.860804 2025] [security2:error] [pid 1626:tid 1626] [client 147.93.157.235:57330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enespiral.net"] [uri "/wp-config.php"] [unique_id "aUNfQiL1nkC_sppETbzRDgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-18 01:25:32
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 20:25:27.148474 2025] [security2:error] [pid 23755:tid 23755] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 20:25:27.148474 2025] [security2:error] [pid 23755:tid 23755] [client 147.93.157.235:57917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odessatexas.us"] [uri "/wp-config.php"] [unique_id "aUNYB-ldKFxcTSGqvKUWZgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-18 00:42:25
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 19:42:19.180318 2025] [security2:error] [pid 24644:tid 24644] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 19:42:19.180318 2025] [security2:error] [pid 24644:tid 24644] [client 147.93.157.235:50771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geofreightint.com"] [uri "/wp-config.php"] [unique_id "aUNN6z6SjOb8aW5nSFfMlgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2025-12-18 00:41:22
UTC ·
(10 months ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2025-12-17 23:54:17
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 18:54:11.095499 2025] [security2:error] [pid 18976:tid 18976] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 18:54:11.095499 2025] [security2:error] [pid 18976:tid 18976] [client 147.93.157.235:59212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextstepspersonalfinance.com"] [uri "/wp-config.php"] [unique_id "aUNCo96vs403Mt1XSf7RMQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-17 22:43:55
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 17:43:48.741626 2025] [security2:error] [pid 5365:tid 5365] [cli ...
show more
(mod_security) mod_security (id:210492) triggered by 147.93.157.235 (vmi2811911.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 17:43:48.741626 2025] [security2:error] [pid 5365:tid 5365] [client 147.93.157.235:59409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sundolls.org"] [uri "/wp-config.php"] [unique_id "aUMyJOOiYYe5mDIKFVBuwQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack