🇳🇱
Site.eu
2026-06-18 23:57:53
(20 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇷
SpaceHost-Server
2026-06-18 22:25:13
(22 hours ago)
Brute-Force
Web App Attack
🇩🇪
LRob.fr
2026-06-18 06:45:16
(1 day ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-06-18 05:00:56
(1 day ago)
<jail> banned by fail2ban
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-18 04:08:42
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇬🇧
andypiper
2026-06-18 01:00:26
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
maxpower
2026-06-18 00:16:39
(1 day ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 103.125.146.55 (JP/Japan/-): 3 in the last 360 ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 103.125.146.55 (JP/Japan/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 103.125.146.55 - - [18/Jun/2026:02:14:53 +0200] "POST /xmlrpc.php HTTP/1.1" 404 156282 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0" "-" host=ramsesconsulting.it
103.125.146.55 - - [18/Jun/2026:02:16:15 +0200] "POST /xmlrpc.php HTTP/1.1" 404 159114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.0) Gecko/20100101 Firefox/121.0" "-" host=ramsesconsulting.it
103.125.146.55 - - [18/Jun/2026:02:16:34 +0200] "POST /xmlrpc.php HTTP/1.1" 404 158852 "-" "Mozilla/5.0 (Linux; Android 11; Nokia G50) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.61 Mobile Safari/537.36" "-" host=ramsesconsulting.it
show less
Port Scan
🇬🇷
setupgr
2026-06-16 11:13:21
(3 days ago)
(mod_security) mod_security (id:1000001) triggered by 103.125.146.55: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:1000001) triggered by 103.125.146.55: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 14:13:16.800748 2026] [security2:error] [pid 2280080:tid 2280122] [client 103.125.146.55:33073] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/1.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /1.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.setworldup.com"] [uri "/1.php"] [unique_id "ajEvzMsskNLCXd8cDXRdZQAAAA8"]
show less
Port Scan
🇬🇷
setupgr
2026-06-16 07:51:43
(3 days ago)
(mod_security) mod_security (id:1000001) triggered by 103.125.146.55: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:1000001) triggered by 103.125.146.55: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 10:51:38.176277 2026] [security2:error] [pid 2280080:tid 2280118] [client 103.125.146.55:30501] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/twentytwentytwo/assets/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.sea-sound.com"] [uri "/wp-content/themes/twentytwentytwo/assets/about.php"] [unique_id "ajEAissskNLCXd8cDXQ0yQAAAAs"]
show less
Port Scan
🇬🇷
setupgr
2026-06-16 01:40:34
(3 days ago)
(mod_security) mod_security (id:1000001) triggered by 103.125.146.55: 1 in the last 86400 secs; Port ...
show more
(mod_security) mod_security (id:1000001) triggered by 103.125.146.55: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 04:40:32.558002 2026] [security2:error] [pid 1917021:tid 1917229] [client 103.125.146.55:59385] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "92"] [id "1000001"] [msg "Bad file blocked: /wp-content/themes/theme/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "mail.pankoskal.gr"] [uri "/wp-content/themes/theme/about.php"] [unique_id "ajCpkA799xbSHUG5HIruTAAAANM"]
show less
Port Scan
🇳🇱
middelkoopcc
2026-06-15 15:25:05
(4 days ago)
2026-06-15 17:19:22 [remote 103.125.146.55:45709] AH01276: Cannot serve directory /<redacted>/wp-adm ...
show more
2026-06-15 17:19:22 [remote 103.125.146.55:45709] AH01276: Cannot serve directory /<redacted>/wp-admin/css/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-06-15 17:19:28 [remote 103.125.146.55:45709] AH01276: Cannot serve directory /<redacted>/wp-content/uploads/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-06-15 17:19:41 [remote 103.125.146.55:45709] AH01276: Cannot serve directory /<redacted>/wp-admin/js/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 65 more within 20 minutes
show less
Web App Attack
🇮🇪
Jim Keir
2026-06-15 01:12:35
(4 days ago)
2026-06-15 01:12:34 103.125.146.55 File scanning, blocking 103.125.146.55 for 5 minutes
Web App Attack
🇩🇪
bazter.pro
2026-06-13 19:07:14
(6 days ago)
Fail2Ban: apache-ratelimit - 20 failures
Port Scan
Bad Web Bot
Web App Attack
2026-06-13 13:16:03
(6 days ago)
Banned by Fail2Ban on server
Web App Attack
🇳🇱
Site.eu
2026-06-13 04:55:18
(6 days ago)
Excessive multi-domain requests
Brute-Force