🇺🇸
TPI-Abuse
2026-10-22 11:46:54
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:46:46.589849 2026] [security2:error] [pid 16042:tid 16042] [client 72.61.224.104:47952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.joeordie.com"] [uri "/wp-config.php~"] [unique_id "atn3ppT_uGtDdk2vustY0AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-22 06:17:38
(8 hours ago)
Web application attack detected.
Web App Attack
🇫🇷
masterguru
2026-10-21 17:49:44
(20 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-195)
Hacking
🇦🇺
screwlooseit.com.au
2026-10-21 12:07:53
(1 day ago)
Blocked by CSF 13 firewall - Rule: US/United States/srv1136388.hstgr.cloud
Web App Attack
🇵🇱
ToJa
2026-10-21 07:45:19
(1 day ago)
Web App Port Scaning, [Jail 90], Access Not Existent Virtual Server. (honeypot):
2026/10/21 09:45:17 ...
show more
Web App Port Scaning, [Jail 90], Access Not Existent Virtual Server. (honeypot):
2026/10/21 09:45:17 [info] 32908#32908: *788 handshake rejected while SSL handshaking, client: 72.61.224.104, server: 0.0.0.0:443
show less
Web App Attack
🇬🇧
consul.to
2026-10-21 05:27:30
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
iNetWorker
2026-10-07 07:11:57
(2 weeks ago)
trolling for resource vulnerabilities
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-29 21:59:06
(3 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-28.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-28 00:02:55
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 20:02:52.306614 2026] [security2:error] [pid 18267:tid 18267] [client 72.61.224.104:35592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ohanameetup.party"] [uri "/wp-config.php.bak"] [unique_id "armurLjQ1uIBl7ywzSWx1gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 23:23:04
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 19:23:01.109166 2026] [security2:error] [pid 25512:tid 25512] [client 72.61.224.104:37886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.prostar.industries"] [uri "/wp-config.php.old"] [unique_id "armlVWBJRP2kk40JMyeMgQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jkhorvath.com
2026-09-25 14:03:27
(3 weeks ago)
Request for URL /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings
Phishing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 10:31:33
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:31:27.557366 2026] [security2:error] [pid 6144:tid 6155] [client 72.61.224.104:42854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vinylnotespodcast.com"] [uri "/wp-config.php~"] [unique_id "aqvBf2KNlz0pffqq2xItmgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 10:08:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in th ...
show more
(mod_security) mod_security (id:210492) triggered by 72.61.224.104 (srv1136388.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:08:19.553115 2026] [security2:error] [pid 21427:tid 21427] [client 72.61.224.104:59476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.funnyaaron.com"] [uri "/wp-config.php.bak"] [unique_id "aqu8E02BsxwEtRwuPNZdYgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-09-17 08:17:27
(1 month ago)
csagent: score 20.5: wp-config backup grab x2, 404 noise floor x2; 2 domain(s) in 0s
Web App Attack
🇮🇪
RoboSOC
2026-09-16 14:16:06
(1 month ago)
React Server Components Remote Code Execution Vulnerability, PTR: srv1136388.hstgr.cloud.
Hacking