🇳🇱
homeshowdomain.nl
2026-07-08 22:02:52
(10 hours ago)
Auto-ban: >3000 req/min op 2026-07-08
Web App Attack
SSH
Hacking
🇱🇻
garmtech.com
2026-07-08 13:45:18
(19 hours ago)
Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ...
show more
Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇨🇭
backslash
2026-07-08 13:42:00
(19 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇱
Site.eu
2026-07-08 13:41:33
(19 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-07-08 13:31:20
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:31:12.703872 2026] [security2:error] [pid 24855:tid 24855] [client 20.205.58.4:2825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angeladuffin.com"] [uri "/wp-config.php"] [unique_id "ak5RIM_4Vt4x0Fd7fAArmAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-08 13:26:21
(19 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
www.tana.it
2026-07-08 13:15:02
(19 hours ago)
PHP scan
Web App Attack
🇧🇪
cmbplf
2026-07-08 13:07:36
(19 hours ago)
9.221 requests in 1 hour (1mo4w3h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-08 13:06:22
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:06:15.480496 2026] [security2:error] [pid 11834:tid 11834] [client 20.205.58.4:1561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.wakims.com"] [uri "/wp-config.php"] [unique_id "ak5LRy5qF26LFzYrJ5lxrQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-08 13:05:45
(19 hours ago)
(caddyscan) Scanner path probe from 20.205.58.4 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; ...
show more
(caddyscan) Scanner path probe from 20.205.58.4 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 20.205.58.4 - - [08/Jul/2026:13:03:16 +0000] "GET /wp-login.php HTTP/1.1"
[REDACTED] 200 2627 20.205.58.4 - - [08/Jul/2026:13:04:08 +0000] "GET /wp-admin/a.php HTTP/1.1"
[REDACTED] 200 2627 20.205.58.4 - - [08/Jul/2026:13:04:09 +0000] "GET /wp-admin/alfa.php HTTP/1.1"
[REDACTED] 200 2627 20.205.58.4 - - [08/Jul/2026:13:04:27 +0000] "GET /wp-config.php HTTP/1.1"
[REDACTED] 200 2627 20.205.58.4 - - [08/Jul/2026:13:05:42 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1"
show less
Port Scan
🇳🇱
debestelapp
2026-07-08 12:50:44
(20 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 12:44:51
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 08:44:47.856978 2026] [security2:error] [pid 31310:tid 31310] [client 20.205.58.4:2618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.krmartindale.com"] [uri "/wp-config.php"] [unique_id "ak5GP58aDfiEvd7aybp2IgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 12:29:09
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 20.205.58.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 08:29:04.722707 2026] [security2:error] [pid 11957:tid 11975] [client 20.205.58.4:11670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventistdeathconfusion.com"] [uri "/wp-config.php"] [unique_id "ak5CkPmzZzzXlSBTzehUQwAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-08 12:25:26
(20 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.205.58.4 (HK/Hong Kong/-): 1 in th ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 20.205.58.4 (HK/Hong Kong/-): 1 in the last 3600 secs (0-195)
show less
Hacking
2026-07-08 12:14:50
(20 hours ago)
Aggressive web scan
Web App Attack