🇩🇪
Lunix
2026-06-04 18:53:16
(1 minute ago)
Brute-Force
Web App Attack
2026-06-04 18:51:36
(3 minutes ago)
191.239.240.133 - - [04/Jun/2026:20:51:14 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager. ...
show more
191.239.240.133 - - [04/Jun/2026:20:51:14 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 32651
191.239.240.133 - - [04/Jun/2026:20:51:16 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 29038
191.239.240.133 - - [04/Jun/2026:20:51:18 +0200] "GET /ff.php HTTP/1.1" 404 29038
191.239.240.133 - - [04/Jun/2026:20:51:20 +0200] "GET /x.php HTTP/1.1" 404 29036
191.239.240.133 - - [04/Jun/2026:20:51:21 +0200] "GET /tires.php HTTP/1.1" 404 29036
191.239.240.133 - - [04/Jun/2026:20:51:24 +0200] "GET /wp-block.php HTTP/1.1" 404 29039
191.239.240.133 - - [04/Jun/2026:20:51:26 +0200] "GET /wp-der.php HTTP/1.1" 404 29038
191.239.240.133 - - [04/Jun/2026:20:51:28 +0200] "GET /ah25.php HTTP/1.1" 404 29038
191.239.240.133 - - [04/Jun/2026:20:51:30 +0200] "GET /samll.php HTTP/1.1" 404 29037
191.239.240.133 - - [04/Jun/2026:20:51:33 +0200] "GET /favicon.php HTTP/1.1" 404 29038
...
show less
Web Spam
Web App Attack
2026-06-04 18:43:25
(11 minutes ago)
191.239.240.133 - - [04/Jun/2026:18:43:24 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager. ...
show more
191.239.240.133 - - [04/Jun/2026:18:43:24 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 601 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
patrisei
2026-06-04 18:43:11
(11 minutes ago)
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing
Port Scan
Web App Attack
🇫🇷
masterguru
2026-06-04 18:42:11
(12 minutes ago)
Restricted File Access Attempt. Matched phrase "wp-config.php" at REQUEST_FILENAME. (930130-135)
Hacking
Web App Attack
🇺🇸
chronos
2026-06-04 18:40:16
(14 minutes ago)
[AUTORAVALT][[04/06/2026 - 15:40:16 -03:00 UTC]
Attack from [Microsoft 272945 Brasil LTDA]
[191.239. ...
show more
[AUTORAVALT][[04/06/2026 - 15:40:16 -03:00 UTC]
Attack from [Microsoft 272945 Brasil LTDA]
[191.239.240.133]-[RANGE:191.236.0.0/14]
Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 18:35:03
(19 minutes ago)
(mod_security) mod_security (id:210492) triggered by 191.239.240.133 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 191.239.240.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:34:57.737536 2026] [security2:error] [pid 30187:tid 30192] [client 191.239.240.133:26565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.longevityworkout.com"] [uri "/consultantx/wp-config.php"] [unique_id "aiHFUTE0rbSFnRBBVf12kAAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
djboddington
2026-06-04 18:35:02
(19 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
2026-06-04 18:32:28
(22 minutes ago)
<comment>
Web App Attack
🇻🇳
trung.fun
2026-06-04 18:32:27
(22 minutes ago)
DDoS, Hack, Brute Force, Web Attack
...
DDoS Attack
Web Spam
Hacking
Brute-Force
Web App Attack
🇧🇪
taivas.nl
2026-06-04 18:32:10
(22 minutes ago)
Bad_requests
Bad Web Bot
🇳🇱
Joop
2026-06-04 18:23:08
(31 minutes ago)
2026-06-04 20:23:06 +0200 s39 /this_is_a_new_hello_world.php
Web App Attack
🇩🇪
ghostwarriors
2026-06-04 18:20:11
(34 minutes ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 18:17:23
(37 minutes ago)
(mod_security) mod_security (id:210492) triggered by 191.239.240.133 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 191.239.240.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:17:19.309502 2026] [security2:error] [pid 12609:tid 12609] [client 191.239.240.133:6364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rahmanou.com"] [uri "/consultantx/wp-config.php"] [unique_id "aiHBL3ldwki2Lijx1YJdqQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-04 18:17:20
(37 minutes ago)
WordPress/Woo probe
Web App Attack