๐ฉ๐ช
ger-stg-sifi1
2026-10-17 09:21:11
(2 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 23:28:50
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 19:28:42.476955 2026] [security2:error] [pid 7302:tid 7302] [client 34.19.204.135:52110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luckypupdesigns.com"] [uri "/.git/config"] [unique_id "atKzKlITh7ipwQZrrHXPOwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 12:09:17
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:09:11.366714 2026] [security2:error] [pid 19244:tid 19244] [client 34.19.204.135:42436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucid-events.com"] [uri "/.git/config"] [unique_id "atIT52_z7SpPXdulbjYgyQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
Host One
2026-10-16 12:04:06
(3 days ago)
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 differen ...
show more
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /cpanel/phpinfo.php, /credentials.json, /google-credentials.json, /google-key.json, /mail/phpinfo.php. Automated report.
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 11:51:44
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 11:04:52
(3 days ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐ช๐ธ
masterguru
2026-10-16 10:41:58
(3 days ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
๐ซ๐ท
phoenix1jl96
2026-10-16 07:55:05
(3 days ago)
2026/10/16 09:55:04 [error] 5458#5458: *19956 open() "/home/user-data/www/lucasmaths.fr/mailer/.env" ...
show more
2026/10/16 09:55:04 [error] 5458#5458: *19956 open() "/home/user-data/www/lucasmaths.fr/mailer/.env" failed (2: No such file or directory), client: 34.19.204.135, server: lucasmaths.fr, request: "GET /mailer/.env HTTP/1.1", host: "lucasmaths.fr"
2026/10/16 09:55:04 [error] 5458#5458: *19956 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.19.204.135, server: lucasmaths.fr, request: "GET /mail/.env HTTP/1.1", host: "lucasmaths.fr"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-16 07:49:59
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-16 06:51:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:51:48.151376 2026] [security2:error] [pid 19991:tid 19991] [client 34.19.204.135:58940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lucasadams.com"] [uri "/.git/config"] [unique_id "atHJhKGMuiVLVsEGySyaBAAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
clapper
2026-10-16 05:04:21
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 34.19.204.135 (CA/Canada/135.204.19.34.bc.googl ...
show more
(mod_security) mod_security (id:949110) triggered by 34.19.204.135 (CA/Canada/135.204.19.34.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-16 03:26:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.204.135 (135.204.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:25:59.926295 2026] [security2:error] [pid 23772:tid 23772] [client 34.19.204.135:34326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lubbockknights.com"] [uri "/.git/config"] [unique_id "atGZR3hofoR3swojBFGBOQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 02:40:17
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ฎ๐น
VHosting
2026-10-16 01:25:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฌ๐ง
Andrew
2026-10-16 01:09:39
(3 days ago)
34.19.204.135 - - [16/Oct/2026:02:09:35 +0100] "GET /.git/config HTTP/1.1" 404 18361 "-" "Mozilla/5. ...
show more
34.19.204.135 - - [16/Oct/2026:02:09:35 +0100] "GET /.git/config HTTP/1.1" 404 18361 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.204.135 - - [16/Oct/2026:02:09:36 +0100] "GET /.env HTTP/1.1" 404 18354 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.204.135 - - [16/Oct/2026:02:09:36 +0100] "GET /.env.local HTTP/1.1" 404 18360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.204.135 - - [16/Oct/2026:02:09:37 +0100] "GET /.env.production HTTP/1.1" 404 18365 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.204.135 - - [16/Oct/2026:02:09:37 +0100] "GET /.env.staging HTTP/1.1" 404 18362 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, li
...
show less
Hacking
Web App Attack