🇬🇷
setupgr
2026-06-16 11:28:52
(8 hours ago)
(mod_security) mod_security (id:1000001) triggered by 103.125.146.39: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:1000001) triggered by 103.125.146.39: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 14:28:49.170548 2026] [security2:error] [pid 2210293:tid 2210394] [client 103.125.146.39:31573] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-content/languages/plugins/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.setworldup.com"] [uri "/wp-content/languages/plugins/wp-load.php"] [unique_id "ajEzcdMtn8QwdXQy9m4s5wAAAUw"]
show less
Port Scan
🇬🇷
setupgr
2026-06-16 01:37:59
(18 hours ago)
(mod_security) mod_security (id:1000001) triggered by 103.125.146.39: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:1000001) triggered by 103.125.146.39: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 04:37:54.258537 2026] [security2:error] [pid 1917013:tid 1917146] [client 103.125.146.39:22749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-includes/js/tinymce/themes/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.pankoskal.gr"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ajCo8kEA9pRZS3vlJ2u8UgAAAIU"]
show less
Port Scan
🇩🇪
LRob.fr
2026-06-13 19:45:07
(3 days ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
2026-06-13 13:12:34
(3 days ago)
Banned by Fail2Ban on server
Web App Attack
🇳🇱
GabrielJST
2026-06-13 10:56:56
(3 days ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 103.125.146.39 (JP/Japan ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 103.125.146.39 (JP/Japan/-)
show less
Port Scan
🇩🇪
Ba-Yu
2026-06-13 02:55:33
(3 days ago)
WordPress hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
2026-06-12 16:00:40
(4 days ago)
Fail2Ban wordpress-forbidden on Security-Instance. Persistent malicious activity detected. Evidence: ...
show more
Fail2Ban wordpress-forbidden on Security-Instance. Persistent malicious activity detected. Evidence:
2026/06/12 18:00:27 [error] 647751#647751: *41136 directory index of "/var/www/html/wordpress_main/wp-includes/blocks/preformatted/" is forbidden, client: 103.125.146.39, server: dtalens.com, request: "GET /wp-includes/blocks/preformatted/ HTTP/2.0", host: "dtalens.com", referrer: "http://dtalens.com/wp-includes/blocks/preformatted/"
2026/06/12 18:00:32 [error] 647751#647751: *41136 directory index of "/var/www/html/wordpress_main/wp-includes/Requests/src/Auth/" is forbidden, client: 103.125.146.39, server: dtalens.com, request: "GET /wp-includes/Requests/src/Auth/ HTTP/2.0", host: "dtalens.com", referrer: "http://dtalens.com/wp-includes/Requests/src/Auth/"
2026/06/12 18:00:33 [error] 64775
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-06-11 23:53:52
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇧🇷
Halux
2026-06-11 15:45:43
(5 days ago)
103.125.146.39 Probing protected path or service
Web App Attack
🇫🇷
masterguru
2026-06-11 06:36:25
(5 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-195)
show less
Bad Web Bot
🇦🇹
Pingger Shikkoken
2026-06-11 01:58:16
(5 days ago)
2026-06-11T01:58:16+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-06-11T01:58:16+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.125.146.39 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=3955 DF PROTO=TCP SPT=20401 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-11T01:58:18+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.125.146.39 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=3956 DF PROTO=TCP SPT=20401 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-11T01:58:22+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=103.125.146.39 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=3957 DF PROTO=TCP SPT=20401 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
🇫🇷
AGEPCom
2026-06-10 22:55:42
(5 days ago)
Smart-Ban: IP bannie via score AbuseIPDB
Brute-Force
Web App Attack
🇺🇦
URAN Publishing Service
2026-06-10 18:42:23
(6 days ago)
103.125.146.39 - - [10/Jun/2026:21:42:22 +0300] "GET /wp-content/lock360.php HTTP/1.1" 404 708 "http ...
show more
103.125.146.39 - - [10/Jun/2026:21:42:22 +0300] "GET /wp-content/lock360.php HTTP/1.1" 404 708 "http://www.semst.onu.edu.ua/wp-content/lock360.php" "Go-http-client/1.1"
...
show less
Web App Attack
🇳🇱
Site.eu
2026-06-10 16:50:29
(6 days ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
LRob.fr
2026-06-10 12:00:20
(6 days ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot