πΉπ·
neron
2026-10-23 08:34:59
(3 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
π©πͺ
klaus_ph
2026-10-07 07:45:47
(2 weeks ago)
2026-10-02 00:03:52,166 fail2ban.actions [1316762]: NOTICE [ipblocklist] Ban 91.224.92.159
. ...
show more
2026-10-02 00:03:52,166 fail2ban.actions [1316762]: NOTICE [ipblocklist] Ban 91.224.92.159
...
show less
Bad Web Bot
π©πͺ
xavier-momain.eu
2026-10-05 07:13:54
(3 weeks ago)
CrowdSec ban β scenario: tcp:scan | report #2
Port Scan
π§π·
Peregrine
2026-10-04 03:17:00
(3 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.197 - - [30/Sep/2026:04:18 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.197 - - [30/Sep/2026:04:18:41 -0300] "GET /wp-admin/network/ HTTP/1.1" 404 18193
show less
Bad Web Bot
π§π·
Peregrine
2026-10-03 03:16:58
(3 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.197 - - [30/Sep/2026:04:18 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.197 - - [30/Sep/2026:04:18:41 -0300] "GET /wp-admin/network/ HTTP/1.1" 404 18193
show less
Bad Web Bot
π§π·
Peregrine
2026-10-02 03:16:54
(3 weeks ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.197 - - [30/Sep/2026:04:18 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.197 - - [30/Sep/2026:04:18:41 -0300] "GET /wp-admin/network/ HTTP/1.1" 404 18193
show less
Bad Web Bot
π«π·
SpaceHost-Server
2026-10-01 22:21:58
(3 weeks ago)
Brute-Force
Web App Attack
π§π·
Peregrine
2026-10-01 03:12:02
(3 weeks ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.35 - - [12/Sep/2026:13:39:39 ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 91.224.92.159 172.69.155.35 - - [12/Sep/2026:13:39:39 -0300] "GET /wp-admin/maint/ HTTP/1.1" 404 414
91.224.92.159 172.69.155.35 - - [12/Sep/2026:13:39:40 -0300] "GET /wp-admin/js/ HTTP/1.1" 404 414
91.224.92.159 172.69.155.35 - - [12/Sep/2026:13:39:41 -0300] "GET /wp-admin/js/widgets/ HTTP/1.1" 404 414
show less
Bad Web Bot
π©πͺ
conseilgouz
2026-09-30 13:39:27
(3 weeks ago)
mae-7 : Trying access unauthorized files/dir=>/wp-admin/css/colors/blue/
Hacking
π©πͺ
macrob
2026-09-30 13:10:45
(3 weeks ago)
2026/09/30 13:10:42 [error] 1124836#1124836: *1211949 access forbidden by rule, client: 91.224.92.15 ...
show more
2026/09/30 13:10:42 [error] 1124836#1124836: *1211949 access forbidden by rule, client: 91.224.92.159, server: fn.binixo.es, request: "GET /wp-admin/css/colors/ HTTP/2.0", host: "www.fastcredit.net.ua"
2026/09/30 13:10:43 [error] 1124834#1124834: *1211978 access forbidden by rule, client: 91.224.92.159, server: fn.binixo.es, request: "GET /wp-admin/css/colors/blue/ HTTP/2.0", host: "www.fastcredit.net.ua"
2026/09/30 13:10:44 [error] 1124836#1124836: *1211949 access forbidden by rule, client: 91.224.92.159, server: fn.binixo.es, request: "GET /wp-admin/includes/ HTTP/2.0", host: "www.fastcredit.net.ua"
...
show less
Web App Attack
πΊπΈ
ipblock.com
2026-09-30 12:33:00
(3 weeks ago)
IPBlock protected site ID [644-wsw].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
π©πͺ
bazter.pro
2026-09-30 11:07:31
(3 weeks ago)
Fail2Ban: plesk-scanner - 10 failures
Port Scan
Hacking
Brute-Force
Web App Attack
π©πͺ
maxpower
2026-09-30 10:37:47
(3 weeks ago)
(PERMBLOCK) 91.224.92.159 (GB/United Kingdom/srv-91-224-92-159.serveroffer.net) has had more than 4 ...
show more
(PERMBLOCK) 91.224.92.159 (GB/United Kingdom/srv-91-224-92-159.serveroffer.net) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Port Scan
Anonymous
2026-09-30 10:27:55
(3 weeks ago)
Fail2Ban Log Report 91.224.92.159 - - [30/Sep/2026:12:27:53 +0200] "GET /images/ HTTP/2.0" 444 0 "-" ...
show more
Fail2Ban Log Report 91.224.92.159 - - [30/Sep/2026:12:27:53 +0200] "GET /images/ HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "91.224.92.159"
91.224.92.159 - [30/Sep/2026:12:27:53 +0200] "GET /images/ HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" "91.224.92.159"
91.224.92.159 - - [30/Sep/2026:12:27:53 +0200] "GET /admin/ HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "91.224.92.159"
91.224.92.159 - [30/Sep/2026:12:27:53 +0200] "GET /admin/ HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" "91.224.92.159"
...
show less
Hacking
Brute-Force
Web App Attack
Anonymous
2026-09-30 09:56:45
(3 weeks ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack