🇺🇦
Olexiy Backend
2026-09-17 16:00:21
(1 hour ago)
148.230.66.237
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 10:25:06
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:24:59.528421 2026] [security2:error] [pid 17559:tid 17559] [client 148.230.66.237:39422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbottombikinis.com"] [uri "/wp-config.php.txt"] [unique_id "aqu_-8oqt1erOkq1KkkkVAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-17 10:05:03
(7 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇪
RoboSOC
2026-09-17 08:13:43
(9 hours ago)
React Server Components Remote Code Execution Vulnerability, PTR: srv1471221.hstgr.cloud.
Hacking
🇺🇸
TPI-Abuse
2026-09-17 06:43:11
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 02:43:04.827065 2026] [security2:error] [pid 23889:tid 23889] [client 148.230.66.237:59646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crittergetterpestcontrol.azcrittergetter.com"] [uri "/composer.lock"] [unique_id "aquL-IVbrEsqFEUP2_Ar5gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 04:35:08
(1 day ago)
AGERADE WEBEXPLOIT 148.230.66.237 (srv1471221.hstgr.cloud)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 15:22:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 11:22:15.084212 2026] [security2:error] [pid 25120:tid 25120] [client 148.230.66.237:34550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fatcavestudios.fatcavemedia.com"] [uri "/wp-config.php.save"] [unique_id "aqgRJ2RuJVM5ZnvReLj7mQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 14:36:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:36:48.543403 2026] [security2:error] [pid 8897:tid 8897] [client 148.230.66.237:46554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/wp-config.php.save"] [unique_id "aqgGgDz67tJBt1oZhIvVrAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 06:20:12
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210730) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 02:20:05.397040 2026] [security2:error] [pid 14067:tid 14067] [client 148.230.66.237:38924] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||museum.henning.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "museum.henning.org"] [uri "/db.sql"] [unique_id "aqeSFcoSt7Tvl5Vuy8fvhgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 03:57:09
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 23:57:01.116648 2026] [security2:error] [pid 20937:tid 20937] [client 148.230.66.237:56832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.hg/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "splashstation.org"] [uri "/.hg/store/00manifest.i"] [unique_id "aqdwjdiABouKYIdA-e62ZgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 01:11:55
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 21:11:52.531585 2026] [security2:error] [pid 14699:tid 14699] [client 148.230.66.237:60068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cnphilos.com"] [uri "/.git/index"] [unique_id "aqdJ2GODTZ2fqKvu4n7ShAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 00:38:47
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in t ...
show more
(mod_security) mod_security (id:210492) triggered by 148.230.66.237 (srv1471221.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 20:38:41.150235 2026] [security2:error] [pid 9103:tid 9103] [client 148.230.66.237:59490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kbalan.com"] [uri "/wp-config.php.save"] [unique_id "aqdCEc42cVOuJ1IO2FqpZwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-04 11:08:13
(2 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 148.230.66.237 (IN/India/srv1471221.h ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 148.230.66.237 (IN/India/srv1471221.hstgr.cloud): 1 in the last 3600 secs (0-195)
show less
Hacking
🇱🇻
garmtech.com
2026-06-11 07:32:31
(3 months ago)
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show more
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
Hacking
🇮🇪
RoboSOC
2026-06-02 06:04:28
(3 months ago)
React Server Components Remote Code Execution Vulnerability, PTR: srv1471221.hstgr.cloud.
Hacking