2026-11-14 13:06:14
UTC ·
(1 hour ago)
158.173.36.29 - - [14/Nov/2026:13:06:13 +0000] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php HTTP/1.1" 302 525 "-" "Go-http-client/1.1"
...
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-11-14 12:30:07
UTC ·
(1 hour ago)
(bot_kill_mega) Aggressive Bot Blocked: Go-http-client 158.173.36.29 (ES/Spain/-)
Hacking
🇫🇮
YF
2026-11-14 10:00:39
UTC ·
(4 hours ago)
Go HTTP client scanner
Web App Attack
🇦🇺
electronico
2026-11-14 08:37:20
UTC ·
(5 hours ago)
158.173.36.29 - - [14/Nov/2026:19:37:12 +1100] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php HTTP/2.0" 404 1919 "http://electronicohost.net/wp-content/plugins/neoncore-themes/O/SrHD3odefault.php" "Go-http-client/2.0"
158.173.36.29 - - ...
show more
158.173.36.29 - - [14/Nov/2026:19:37:12 +1100] "GET /wp-content/plugins/neoncore-themes/O/SrHD3odefault.php HTTP/2.0" 404 1919 "http://electronicohost.net/wp-content/plugins/neoncore-themes/O/SrHD3odefault.php" "Go-http-client/2.0"
158.173.36.29 - - [14/Nov/2026:19:37:12 +1100] "GET /wp-includes/core.php HTTP/2.0" 404 1854 "http://electronicohost.net/wp-includes/core.php" "Go-http-client/2.0"
158.173.36.29 - - [14/Nov/2026:19:37:13 +1100] "GET /wp-content/plugins/bbpress/file5.php HTTP/2.0" 404 1877 "http://electronicohost.net/wp-content/plugins/bbpress/file5.php" "Go-http-client/2.0"
158.173.36.29 - - [14/Nov/2026:19:37:14 +1100] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 404 1877 "http://electronicohost.net/wp-content/plugins/buddypress/alfa.php" "Go-http-client/2.0"
158.173.36.29 - - [14/Nov/2026:19:37:15 +1100] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/2.0" 404 1877 "http://electronicohost.net/wp-content/plugins/enhanced-text-widget/analyst
...
show less
Brute-Force
Web App Attack
🇬🇧
Artelis
2026-11-14 07:47:45
UTC ·
(6 hours ago)
158.173.36.29 - - [14/Nov/2026:07:47:45 +0000] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
...
Web App Attack
🇳🇱
Roderic
2026-11-07 14:50:31
UTC ·
(6 days ago)
Insights: 5 probe requests within 24 hours on 1 site, e.g. /wp-content/plugins/buddypress/alfa.php (no normal page views)
Web App Attack
2026-10-30 06:37:07
UTC ·
(2 weeks ago)
Web scanner: GET /wp-includes/core.php
Web App Attack
Hacking
2026-10-30 02:39:22
UTC ·
(2 weeks ago)
158.173.36.29 - - [30/Oct/2026:03:39:22 +0100] "GET /wp-content/plugins/neoncore-themes/O/ HTTP/1.1" 301 169 "-" "Go-http-client/1.1"
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-22 15:05:10
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:05:06.374602 2026] [security2:error] [pid 16776:tid 16776] [client 158.173.36.29:37313] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:05:06.374602 2026] [security2:error] [pid 16776:tid 16776] [client 158.173.36.29:37313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "religiousholidaycards.com"] [uri "/.env"] [unique_id "atomIv3lKUVbwCK0UawhaQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 12:38:07
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:38:01.769151 2026] [security2:error] [pid 1145:tid 1145] [client 158.173.36.29:44155] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 08:38:01.769151 2026] [security2:error] [pid 1145:tid 1145] [client 158.173.36.29:44155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wpcoc.org"] [uri "/.env"] [unique_id "atoDqYPO0E0TPCoSAUGgVgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 11:52:34
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:52:31.405755 2026] [security2:error] [pid 12031:tid 12031] [client 158.173.36.29:39951] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:52:31.405755 2026] [security2:error] [pid 12031:tid 12031] [client 158.173.36.29:39951] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emrob.com"] [uri "/.env"] [unique_id "atn4_7HAZO2i7AAtDVmOwAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:39:14
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:39:09.313264 2026] [security2:error] [pid 19535:tid 19660] [client 158.173.36.29:49753] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:39:09.313264 2026] [security2:error] [pid 19535:tid 19660] [client 158.173.36.29:49753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazzzcatz.com"] [uri "/.env"] [unique_id "atnZvThFo8w4a59km2j0ZQAAAdI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:17:09
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:17:02.833186 2026] [security2:error] [pid 18493:tid 18493] [client 158.173.36.29:26515] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:17:02.833186 2026] [security2:error] [pid 18493:tid 18493] [client 158.173.36.29:26515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamariposagallery.com"] [uri "/.env"] [unique_id "atnUjpm9DbLj9s_6Q4QZ5QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 04:40:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:40:20.448983 2026] [security2:error] [pid 14891:tid 14891] [client 158.173.36.29:49549] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 00:40:20.448983 2026] [security2:error] [pid 14891:tid 14891] [client 158.173.36.29:49549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "littlehornengineering.com"] [uri "/.env"] [unique_id "atmTtNKrESjNS7cd6noOwwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 00:12:59
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 20:12:51.409804 2026] [security2:error] [pid 31067:tid 31103] [client 158.173.36.29:50003] M ...
show more
(mod_security) mod_security (id:210492) triggered by 158.173.36.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 20:12:51.409804 2026] [security2:error] [pid 31067:tid 31103] [client 158.173.36.29:50003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moogoob.com"] [uri "/.env"] [unique_id "atlVA5yvXNgCtqvdV4M-XQAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
