🇳🇱
Mangelot Hosting
2026-08-30 10:11:15
(2 days ago)
(wp_config_access) srv104 WordPress wp-config Scan 34.106.95.159 (US/United States/159.95.106.34.bc. ...
show more
(wp_config_access) srv104 WordPress wp-config Scan 34.106.95.159 (US/United States/159.95.106.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 02:23:17
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.106.95.159 (159.95.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.95.159 (159.95.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 22:23:09.645742 2026] [security2:error] [pid 25727:tid 25727] [client 34.106.95.159:35120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afdfurniture.com"] [uri "/.git/config"] [unique_id "apOUDWV-QXCu78R_BSgv6QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-29 22:33:20
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇮🇹
VHosting
2026-08-29 21:45:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 19:58:43
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.106.95.159 (159.95.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.95.159 (159.95.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 15:58:39.914420 2026] [security2:error] [pid 1212293:tid 1212301] [client 34.106.95.159:43868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chriskovac.com"] [uri "/.git/config"] [unique_id "apM572tTUuPv31GmzJ1KxAAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MSC IT for Business GmbH
2026-08-29 19:30:09
(3 days ago)
GASTO/CrowdSec: gasto/modsec-critical triggered (via crowdsec-agent, categories 15,21)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 18:03:07
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.106.95.159 (159.95.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.95.159 (159.95.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 14:03:00.775764 2026] [security2:error] [pid 10096:tid 10096] [client 34.106.95.159:41396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chooseyourowntrail.com"] [uri "/.git/config"] [unique_id "apMe1K5T2WnaZBTKPG9EeQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-08-29 15:57:35
(3 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇫🇷
dynamix
2026-08-29 14:10:23
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-08-29 14:05:46
(3 days ago)
Abuse Detected (12)
Brute-Force
Web App Attack
🇧🇪
taivas.nl
2023-12-27 22:32:12
(2 years ago)
Bad_requests
Bad Web Bot
2023-12-27 22:15:47
(2 years ago)
enlinea.de 34.106.95.159 [27/Dec/2023:23:15:44 +0100] "POST //xmlrpc.php HTTP/1.1" 200 749 "-" "Mozi ...
show more
enlinea.de 34.106.95.159 [27/Dec/2023:23:15:44 +0100] "POST //xmlrpc.php HTTP/1.1" 200 749 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
enlinea.de 34.106.95.159 [27/Dec/2023:23:15:45 +0100] "POST //xmlrpc.php HTTP/1.1" 200 5926 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Web App Attack
🇩🇪
stinpriza
2023-12-27 22:13:40
(2 years ago)
WP Authentication attempt for unknown user
Brute-Force
Web App Attack
🇮🇱
Dolphi
2023-12-27 22:10:02
(2 years ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2023-12-27 22:01:55
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.106.95.159 (159.95.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.106.95.159 (159.95.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 17:01:50.274178 2023] [security2:error] [pid 9971] [client 34.106.95.159:57923] [client 34.106.95.159] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.bestlawnsohio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bestlawnsohio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZYyezs7ywgwfxHT3eZzurgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack