AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User KCByte LLC , the webmaster of Agplog.com, joined AbuseIPDB in August 2020 and has reported 1,815 IP addresses.

Standing (weight) is good.

ACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇦🇹 108.162.221.141	24 Oct 2024	[24/Oct/2024:10:13:47.212333 0000] Zxod25EQPalXnwvDBMEnwwAAAME 108.162.221.141 35978 127.0.0.1 7081 ... show more [24/Oct/2024:10:13:47.212333 0000] Zxod25EQPalXnwvDBMEnwwAAAME 108.162.221.141 35978 127.0.0.1 7081 X-Real-IP: 108.162.221.141 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 108.162.221.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/shop/.git/config"] [unique_id "Zxod25EQPalXnwvDBMEnwwAAAME"] show less	Web App Attack
🇮🇩 147.139.203.151	23 Oct 2024	[23/Oct/2024:19:56:59.482773 0000] ZxlVC284FoiJe_Nc7UEN5QAAAAE 147.139.203.151 36982 127.0.0.1 7080 ... show more [23/Oct/2024:19:56:59.482773 0000] ZxlVC284FoiJe_Nc7UEN5QAAAAE 147.139.203.151 36982 127.0.0.1 7080 X-Real-IP: 147.139.203.151 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 147.139.203.151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/beta/.env"] [unique_id "ZxlVC284FoiJe_Nc7UEN5QAAAAE"] show less	Web App Attack
🇺🇸 23.94.148.40	22 Oct 2024	[22/Oct/2024:18:50:29.460556 0000] Zxfz9VNTuXp-trGhF051TAAAAMA 23.94.148.40 59902 127.0.0.1 7080 X- ... show more [22/Oct/2024:18:50:29.460556 0000] Zxfz9VNTuXp-trGhF051TAAAAMA 23.94.148.40 59902 127.0.0.1 7080 X-Real-IP: 23.94.148.40 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 23.94.148.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/.env.development.local"] [unique_id "Zxfz9VNTuXp-trGhF051TAAAAMA"] show less	Web App Attack
🇦🇪 5.30.0.22	21 Oct 2024	[21/Oct/2024:04:25:47.267524 0000] ZxXXy_EDjH6XcFHRcf4hKQAAANA 5.30.0.22 54852 127.0.0.1 7080 X-Rea ... show more [21/Oct/2024:04:25:47.267524 0000] ZxXXy_EDjH6XcFHRcf4hKQAAANA 5.30.0.22 54852 127.0.0.1 7080 X-Real-IP: 5.30.0.22 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 5.30.0.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/kyc/.env"] [unique_id "ZxXXy_EDjH6XcFHRcf4hKQAAANA"] show less	Web App Attack
🇩🇪 146.19.247.166	19 Oct 2024	[19/Oct/2024:12:58:15.853032 0000] ZxOs54wTBhoFsYDf3N3mxwAAABY 146.19.247.166 53032 127.0.0.1 7080 ... show more [19/Oct/2024:12:58:15.853032 0000] ZxOs54wTBhoFsYDf3N3mxwAAABY 146.19.247.166 53032 127.0.0.1 7080 X-Real-IP: 146.19.247.166 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 146.19.247.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/.env.staging"] [unique_id "ZxOs54wTBhoFsYDf3N3mxwAAABY"] show less	Web App Attack
🇳🇱 188.190.10.52	16 Oct 2024	(smtpauth) Failed SMTP AUTH login from 188.190.10.52 (UA/Ukraine/188-190-10-52.clevhosting.com): 5 i ... show more (smtpauth) Failed SMTP AUTH login from 188.190.10.52 (UA/Ukraine/188-190-10-52.clevhosting.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-16 04:25:05 login authenticator failed for (User) [188.190.10.52]: 535 Incorrect authentication data (set_id=scan) 2024-10-16 04:31:05 login authenticator failed for (User) [188.190.10.52]: 535 Incorrect authentication data (set_id=root) 2024-10-16 04:37:07 login authenticator failed for (User) [188.190.10.52]: 535 Incorrect authentication data (set_id=info) 2024-10-16 04:43:13 login authenticator failed for (User) [188.190.10.52]: 535 Incorrect authentication data (set_id=admin) 2024-10-16 04:49:19 login authenticator failed for (User) [188.190.10.52]: 535 Incorrect authentication data (set_id=test) show less	Brute-Force SSH
🇳🇱 154.213.184.3	12 Oct 2024	[12/Oct/2024:18:46:46.558159 0000] ZwrEFsQjywtOUCfRGbvShQAAAMI 154.213.184.3 58554 127.0.0.1 7080 X ... show more [12/Oct/2024:18:46:46.558159 0000] ZwrEFsQjywtOUCfRGbvShQAAAMI 154.213.184.3 58554 127.0.0.1 7080 X-Real-IP: 154.213.184.3 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 154.213.184.3] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|74.208.110.204\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "74.208.110.204"] [uri "/vcruntime140.dll"] [unique_id "ZwrEFsQjywtOUCfRGbvShQAAAMI"] show less	Web App Attack
🇲🇽 189.245.73.15	12 Oct 2024	(smtpauth) Failed SMTP AUTH login from 189.245.73.15 (MX/Mexico/host-15-73-static-245-189.uninet-ide ... show more (smtpauth) Failed SMTP AUTH login from 189.245.73.15 (MX/Mexico/host-15-73-static-245-189.uninet-ide.com.mx): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-12 18:41:31 login authenticator failed for (DESKTOP-G3SE1HI) [189.245.73.15]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-12 18:41:31 login authenticator failed for (DESKTOP-G3SE1HI) [189.245.73.15]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-12 18:41:32 login authenticator failed for (DESKTOP-G3SE1HI) [189.245.73.15]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-12 18:41:39 login authenticator failed for (DESKTOP-G3SE1HI) [189.245.73.15]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-12 18:41:40 login authenticator failed for (DESKTOP-G3SE1HI) [189.245.73.15]: 535 Incorrect authentication data (set_id=postmaster) show less	Brute-Force SSH
🇲🇽 189.162.168.157	09 Oct 2024	(smtpauth) Failed SMTP AUTH login from 189.162.168.157 (MX/Mexico/dsl-189-162-168-157-dyn.prod-infin ... show more (smtpauth) Failed SMTP AUTH login from 189.162.168.157 (MX/Mexico/dsl-189-162-168-157-dyn.prod-infinitum.com.mx): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-09 01:12:40 login authenticator failed for (BJX-ALMACEN) [189.162.168.157]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:12:41 login authenticator failed for (BJX-ALMACEN) [189.162.168.157]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:12:42 login authenticator failed for (BJX-ALMACEN) [189.162.168.157]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:12:43 login authenticator failed for (BJX-ALMACEN) [189.162.168.157]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:12:43 login authenticator failed for (BJX-ALMACEN) [189.162.168.157]: 535 Incorrect authentication data (set_id=postmaster) show less	Brute-Force SSH
🇲🇽 189.162.89.14	09 Oct 2024	(smtpauth) Failed SMTP AUTH login from 189.162.89.14 (MX/Mexico/dsl-189-162-89-14-dyn.prod-infinitum ... show more (smtpauth) Failed SMTP AUTH login from 189.162.89.14 (MX/Mexico/dsl-189-162-89-14-dyn.prod-infinitum.com.mx): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-09 01:09:43 login authenticator failed for (BJX-ALMACEN) [189.162.89.14]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:09:44 login authenticator failed for (BJX-ALMACEN) [189.162.89.14]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:09:45 login authenticator failed for (BJX-ALMACEN) [189.162.89.14]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:09:46 login authenticator failed for (BJX-ALMACEN) [189.162.89.14]: 535 Incorrect authentication data (set_id=postmaster) 2024-10-09 01:09:46 login authenticator failed for (BJX-ALMACEN) [189.162.89.14]: 535 Incorrect authentication data (set_id=postmaster) show less	Brute-Force SSH
🇰🇷 121.125.71.53	06 Oct 2024	[06/Oct/2024:06:47:16.972883 0000] ZwIydClpn0ZEWfY8FiMNLgAAAMA 121.125.71.53 55200 127.0.0.1 7080 X ... show more [06/Oct/2024:06:47:16.972883 0000] ZwIydClpn0ZEWfY8FiMNLgAAAMA 121.125.71.53 55200 127.0.0.1 7080 X-Real-IP: 121.125.71.53 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 121.125.71.53] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\\\\\w \\\\\\\\/[\\\\\\\\w\\\\\\\\-\\\\\\\\.] )(?:;(?:charset=[\\\\\\\\w\\\\\\\\-]{1,18}\|boundary=[\\\\\\\\w\\\\\\\\-] )?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|74.208.110.204\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "74.208.110.204"] [uri "/index.jsp"] [unique_id "ZwIydClpn0ZEWfY8FiMNLgAAAMA"] show less	Web App Attack
🇱🇹 154.216.20.215	06 Oct 2024	(smtpauth) Failed SMTP AUTH login from 154.216.20.215 (LT/Lithuania/-): 5 in the last 3600 secs; Por ... show more (smtpauth) Failed SMTP AUTH login from 154.216.20.215 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-06 06:42:09 login authenticator failed for (User) [154.216.20.215]: 535 Incorrect authentication data (set_id=[email protected]) 2024-10-06 06:42:10 login authenticator failed for (User) [154.216.20.215]: 535 Incorrect authentication data (set_id=[email protected]) 2024-10-06 06:42:11 login authenticator failed for (User) [154.216.20.215]: 535 Incorrect authentication data (set_id=[email protected]) 2024-10-06 06:42:11 login authenticator failed for (User) [154.216.20.215]: 535 Incorrect authentication data (set_id=[email protected]) 2024-10-06 06:42:12 login authenticator failed for (User) [154.216.20.215]: 535 Incorrect authentication data (set_id=[email protected]) show less	Brute-Force SSH
🇳🇱 94.141.120.236	05 Oct 2024	(smtpauth) Failed SMTP AUTH login from 94.141.120.236 (US/United States/-): 5 in the last 3600 secs; ... show more (smtpauth) Failed SMTP AUTH login from 94.141.120.236 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-10-05 01:27:06 login authenticator failed for (User) [94.141.120.236]: 535 Incorrect authentication data (set_id=admin) 2024-10-05 01:33:52 login authenticator failed for (User) [94.141.120.236]: 535 Incorrect authentication data (set_id=user) 2024-10-05 01:40:50 login authenticator failed for (User) [94.141.120.236]: 535 Incorrect authentication data (set_id=sales) 2024-10-05 01:47:49 login authenticator failed for (User) [94.141.120.236]: 535 Incorrect authentication data (set_id=spam) 2024-10-05 01:54:49 login authenticator failed for (User) [94.141.120.236]: 535 Incorrect authentication data (set_id=scan) show less	Brute-Force SSH
🇬🇧 78.153.140.224	04 Oct 2024	[04/Oct/2024:20:58:23.780842 0000] ZwBW7xFNG2Cg6IDoPKcP2wAAAA4 78.153.140.224 36458 127.0.0.1 7080 ... show more [04/Oct/2024:20:58:23.780842 0000] ZwBW7xFNG2Cg6IDoPKcP2wAAAA4 78.153.140.224 36458 127.0.0.1 7080 X-Real-IP: 78.153.140.224 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 78.153.140.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/api/.env"] [unique_id "ZwBW7xFNG2Cg6IDoPKcP2wAAAA4"] show less	Web App Attack
🇦🇹 141.101.105.13	01 Oct 2024	[01/Oct/2024:10:23:47.319301 0000] ZvvNs0M5ICzpoZtuWQpGMAAAABY 141.101.105.13 60718 127.0.0.1 7081 ... show more [01/Oct/2024:10:23:47.319301 0000] ZvvNs0M5ICzpoZtuWQpGMAAAABY 141.101.105.13 60718 127.0.0.1 7081 X-Real-IP: 141.101.105.13 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.105.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/library/.env"] [unique_id "ZvvNs0M5ICzpoZtuWQpGMAAAABY"] show less	Web App Attack
🇦🇹 141.101.104.96	01 Oct 2024	[01/Oct/2024:10:23:40.970465 0000] ZvvNrEM5ICzpoZtuWQpGKgAAAA4 141.101.104.96 55724 127.0.0.1 7081 ... show more [01/Oct/2024:10:23:40.970465 0000] ZvvNrEM5ICzpoZtuWQpGKgAAAA4 141.101.104.96 55724 127.0.0.1 7081 X-Real-IP: 141.101.104.96 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.104.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lowendtalk.co"] [uri "/app/.env"] [unique_id "ZvvNrEM5ICzpoZtuWQpGKgAAAA4"] show less	Web App Attack
🇦🇹 141.101.105.148	01 Oct 2024	[01/Oct/2024:10:23:46.184546 0000] ZvvNskM5ICzpoZtuWQpGLwAAABQ 141.101.105.148 55802 127.0.0.1 7081 ... show more [01/Oct/2024:10:23:46.184546 0000] ZvvNskM5ICzpoZtuWQpGLwAAABQ 141.101.105.148 55802 127.0.0.1 7081 X-Real-IP: 141.101.105.148 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 141.101.105.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lowendtalk.co"] [uri "/.env.production"] [unique_id "ZvvNskM5ICzpoZtuWQpGLwAAABQ"] show less	Web App Attack
🇳🇱 154.213.184.7	01 Oct 2024	[01/Oct/2024:09:04:12.296657 0000] Zvu7DEM5ICzpoZtuWQpF9QAAABM 154.213.184.7 34390 127.0.0.1 7080 X ... show more [01/Oct/2024:09:04:12.296657 0000] Zvu7DEM5ICzpoZtuWQpF9QAAABM 154.213.184.7 34390 127.0.0.1 7080 X-Real-IP: 154.213.184.7 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 154.213.184.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|74.208.110.204\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "74.208.110.204"] [uri "/softokn3.dll"] [unique_id "Zvu7DEM5ICzpoZtuWQpF9QAAABM"] show less	Web App Attack
🇺🇸 45.43.11.149	29 Sep 2024	[29/Sep/2024:08:43:02.978368 0000] ZvkTFghAjrwT1YA3Au-HuwAAABA 45.43.11.149 57340 127.0.0.1 7080 X- ... show more [29/Sep/2024:08:43:02.978368 0000] ZvkTFghAjrwT1YA3Au-HuwAAABA 45.43.11.149 57340 127.0.0.1 7080 X-Real-IP: 45.43.11.149 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 45.43.11.149] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/modsecurity.d/rules/comodo_free/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|74.208.110.204\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "74.208.110.204"] [uri "/configs/application.ini"] [unique_id "ZvkTFghAjrwT1YA3Au-HuwAAABA"] show less	Web App Attack
🇬🇧 78.153.140.223	28 Sep 2024	[28/Sep/2024:21:29:07.954050 0000] Zvh1I6EZopdoZe77USsG-AAAANY 78.153.140.223 45694 127.0.0.1 7080 ... show more [28/Sep/2024:21:29:07.954050 0000] Zvh1I6EZopdoZe77USsG-AAAANY 78.153.140.223 45694 127.0.0.1 7080 X-Real-IP: 78.153.140.223 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 78.153.140.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/Api1/.env"] [unique_id "Zvh1I6EZopdoZe77USsG-AAAANY"] show less	Web App Attack
🇫🇷 178.215.236.55	25 Sep 2024	(smtpauth) Failed SMTP AUTH login from 178.215.236.55 (FR/France/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 178.215.236.55 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-09-25 14:45:46 login authenticator failed for (User) [178.215.236.55]: 535 Incorrect authentication data ([email protected]) 2024-09-25 14:45:47 login authenticator failed for (User) [178.215.236.55]: 535 Incorrect authentication data ([email protected]) 2024-09-25 14:45:48 login authenticator failed for (User) [178.215.236.55]: 535 Incorrect authentication data ([email protected]) 2024-09-25 14:45:48 login authenticator failed for (User) [178.215.236.55]: 535 Incorrect authentication data ([email protected]) 2024-09-25 14:45:49 login authenticator failed for (User) [178.215.236.55]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇩🇰 188.190.10.145	25 Sep 2024	(smtpauth) Failed SMTP AUTH login from 188.190.10.145 (NL/The Netherlands/188-190-10-145.clevhosting ... show more (smtpauth) Failed SMTP AUTH login from 188.190.10.145 (NL/The Netherlands/188-190-10-145.clevhosting.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-09-25 00:37:00 login authenticator failed for (User) [188.190.10.145]: 535 Incorrect authentication data (set_id=info) 2024-09-25 00:42:39 login authenticator failed for (User) [188.190.10.145]: 535 Incorrect authentication data (set_id=root) 2024-09-25 00:48:22 login authenticator failed for (User) [188.190.10.145]: 535 Incorrect authentication data (set_id=admin) 2024-09-25 00:55:45 login authenticator failed for (User) [188.190.10.145]: 535 Incorrect authentication data (set_id=test) 2024-09-25 01:03:11 login authenticator failed for (User) [188.190.10.145]: 535 Incorrect authentication data (set_id=user) show less	Brute-Force SSH
🇱🇹 154.216.19.52	24 Sep 2024	(smtpauth) Failed SMTP AUTH login from 154.216.19.52 (LT/Lithuania/-): 5 in the last 3600 secs; Port ... show more (smtpauth) Failed SMTP AUTH login from 154.216.19.52 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SMTPAUTH; Logs: 2024-09-24 23:31:26 login authenticator failed for (User) [154.216.19.52]: 535 Incorrect authentication data ([email protected]) 2024-09-24 23:31:28 login authenticator failed for (User) [154.216.19.52]: 535 Incorrect authentication data ([email protected]) 2024-09-24 23:31:29 login authenticator failed for (User) [154.216.19.52]: 535 Incorrect authentication data ([email protected]) 2024-09-24 23:31:32 login authenticator failed for (User) [154.216.19.52]: 535 Incorrect authentication data ([email protected]) 2024-09-24 23:31:33 login authenticator failed for (User) [154.216.19.52]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇨🇮 160.154.76.118	24 Sep 2024	160.154.76.118 - - [24/Sep/2024:10:57:19 0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatibl ... show more 160.154.76.118 - - [24/Sep/2024:10:57:19 0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt; DTS Agent" show less	Web App Attack
🇺🇸 34.94.33.134	23 Sep 2024	[23/Sep/2024:18:43:15.896274 0000] ZvG2wyKh2pxJV3khuOTwZQAAAEQ 34.94.33.134 58594 127.0.0.1 7080 X- ... show more [23/Sep/2024:18:43:15.896274 0000] ZvG2wyKh2pxJV3khuOTwZQAAAEQ 34.94.33.134 58594 127.0.0.1 7080 X-Real-IP: 34.94.33.134 Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.94.33.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/modsecurity.d/rules/comodo_free/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "74.208.110.204"] [uri "/laravel/.env"] [unique_id "ZvG2wyKh2pxJV3khuOTwZQAAAEQ"] show less	Web App Attack