🇧🇪
Saec
2026-06-09 08:30:23
(3 days ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (8× on saec.me)
Port Scan
Web App Attack
🇮🇩
David Koswari
2026-05-29 05:14:00
(2 weeks ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇺🇸
mawan
2026-05-21 09:25:56
(3 weeks ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
mawan
2026-05-20 02:24:29
(3 weeks ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇫🇷
solution.it
2026-05-19 21:42:11
(3 weeks ago)
[Tue May 19 23:42:10.418205 2026] [php7:error] [pid 770748:tid 770748] [client 103.77.106.149:50232] ...
show more
[Tue May 19 23:42:10.418205 2026] [php7:error] [pid 770748:tid 770748] [client 103.77.106.149:50232] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
🇫🇷
tilellit.pro
2026-05-19 10:20:40
(3 weeks ago)
Fail2Ban banned 103.77.106.149 for security violations in jail wp-armour. Log: 2026/05/19 10:20:39 [ ...
show more
Fail2Ban banned 103.77.106.149 for security violations in jail wp-armour. Log: 2026/05/19 10:20:39 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 103.77.106.149 | Target: wplogin" , client: 103.77.106.149, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
maxpower
2026-05-18 23:22:21
(3 weeks ago)
(wp_login) REGOLA 1 - WP Login Attack 103.77.106.149 (ID/Indonesia/-): 5 in the last 3600 secs; Port ...
show more
(wp_login) REGOLA 1 - WP Login Attack 103.77.106.149 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 103.77.106.149 - - [19/May/2026:01:22:12 +0200] "GET /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=kleos81.com
103.77.106.149 - - [19/May/2026:01:22:12 +0200] "GET /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=kleos81.com
103.77.106.149 - - [19/May/2026:01:22:13 +0200] "GET /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=kleos81.com
103.77.106.149 - - [19/May/2026:01:22:14 +0200] "GET /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=kleos81.com
103.77.106.149 - - [19/May/2026:01:22:14 +0200] "GET /wp-login.php HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" host=kleos81.com
show less
Port Scan
🇺🇸
lostswordfish.com
2026-05-18 20:44:04
(3 weeks ago)
Wordfence waf block on fairregistry
Web App Attack
2026-05-18 19:58:02
(3 weeks ago)
2026-05-18T21:58:02.241742+02:00 zanati wp(www.sahpa.co.za)[3384437]: Blocked authentication attempt ...
show more
2026-05-18T21:58:02.241742+02:00 zanati wp(www.sahpa.co.za)[3384437]: Blocked authentication attempt for Lisa Ncube from 103.77.106.149
...
show less
Web App Attack
🇩🇪
stinpriza
2026-05-18 19:01:55
(3 weeks ago)
Web App Attack
Web App Attack
🇫🇷
tilellit.pro
2026-05-18 18:25:07
(3 weeks ago)
Fail2Ban banned 103.77.106.149 for security violations in jail wp-armour. Log: 2026/05/18 18:25:05 [ ...
show more
Fail2Ban banned 103.77.106.149 for security violations in jail wp-armour. Log: 2026/05/18 18:25:05 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 103.77.106.149 | Target: wplogin" , client: 103.77.106.149, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇮🇩
Burayot
2026-05-01 12:35:14
(1 month ago)
LF_APACHE_403: 103.77.106.149 (ID/Indonesia/-), more than 10 Apache 403 hits in the last 3600 secs
Web App Attack
🇮🇩
penjaga BRIN
2026-04-30 08:34:49
(1 month ago)
Web application attack
Web App Attack
🇮🇩
penjaga BRIN
2026-04-28 15:39:56
(1 month ago)
Web application attack
Web App Attack
🇮🇩
hermawan
2026-04-28 10:22:54
(1 month ago)
1777371627.700794 CNK9eA4ZHA4NirEn41 103.77.106.149 57496 103.166.156.58 80 1 GET staklim-jatim.bmkg ...
show more
1777371627.700794 CNK9eA4ZHA4NirEn41 103.77.106.149 57496 103.166.156.58 80 1 GET staklim-jatim.bmkg.go.id / - 1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0 - 0 281 301 Moved Permanently - - (empty) - - - - - - FzSBejOgdRxF7Ac0d - text/html ge11nn050000_b223a0ebb0b5_000000000000_000000000000 04/28/2026-17:20:27.700794
...
show less
Email Spam
Hacking