Anonymous
2026-08-27 06:29:30
(2 weeks ago)
Aggressive web scan
Web App Attack
🇺🇸
xplaye
2026-08-26 07:35:54
(2 weeks ago)
Brute-force login attack detected by WordPress firewall. 5 failed login attempts within the configur ...
show more
Brute-force login attack detected by WordPress firewall. 5 failed login attempts within the configured time window.
show less
Brute-Force
🇪🇸
robotstxt
2026-07-16 17:25:46
(1 month ago)
107.154.68.25 - - [16/Jul/2026:16:21:35 +0000] "POST /roundcube/installer/index.php HTTP/1.1" 404 31 ...
show more
107.154.68.25 - - [16/Jul/2026:16:21:35 +0000] "POST /roundcube/installer/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Firefox/102.0" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:17:22:59 +0000] "POST /cgi-bin/luci/ HTTP/1.1" 404 28150 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:17:22:59 +0000] "POST /cgi-bin/luci/ HTTP/1.1" 404 28150 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:17:25:06 +0000] "GET /cgi-bin/login.cgi?username=admin&password=admin HTTP/1.1" 404 28155 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:17:25:06 +0000] "GET /cgi-bin/login.cgi?username=admin&password=admin HTTP/1.1" 404 28155 "-" "Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gec
...
show less
Bad Web Bot
🇪🇸
robotstxt
2026-07-16 16:22:20
(1 month ago)
107.154.68.25 - - [16/Jul/2026:16:13:26 +0000] "GET /cgi-bin/test.cgi HTTP/1.1" 404 28150 "() { igno ...
show more
107.154.68.25 - - [16/Jul/2026:16:13:26 +0000] "GET /cgi-bin/test.cgi HTTP/1.1" 404 28150 "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:16:18:50 +0000] "POST /cgi-bin/up.cgi HTTP/1.1" 404 28150 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:16:20:41 +0000] "POST /mailingupgrade.php HTTP/1.1" 404 28150 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:92.0) Gecko/20100101 Firefox/92.0" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:16:21:54 +0000] "POST /cgi-bin/login.cgi HTTP/1.1" 404 28150 "https://www.segurodevidayfamilia.es:443" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Safari/605.1.15" "13.217.115.234"
107.154.68.25 - - [16/Jul/2026:16:21:34 +0000] "GET /cgi-bin/cgiServer.exx?
...
show less
Bad Web Bot
🇪🇸
robotstxt
2026-07-13 23:38:03
(1 month ago)
107.154.68.25 - - [13/Jul/2026:23:33:41 +0000] "GET /cgi-bin/qmailadmin/ HTTP/1.1" 404 20978 "https: ...
show more
107.154.68.25 - - [13/Jul/2026:23:33:41 +0000] "GET /cgi-bin/qmailadmin/ HTTP/1.1" 404 20978 "https://productos.aegon.es:443/cgi-bin/qmailadmin" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.1 Safari/605.1.15" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:23:37:33 +0000] "GET /cgi-bin/wwwctrl.cgi?action=home HTTP/1.1" 404 20979 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:23:37:33 +0000] "GET /cgi-bin/wwwctrl.cgi?action=home HTTP/1.1" 404 20979 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "54.92.176.218"
...
show less
Bad Web Bot
🇪🇸
robotstxt
2026-07-13 21:34:41
(1 month ago)
107.154.68.25 - - [13/Jul/2026:20:51:26 +0000] "GET /phpMyAdmin/index.php?db=information_schema HTTP ...
show more
107.154.68.25 - - [13/Jul/2026:20:51:26 +0000] "GET /phpMyAdmin/index.php?db=information_schema HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Windows NT 10.0; rv:109.0) Gecko/20100101 Firefox/115.0" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:21:26:11 +0000] "GET /cgi-bin/redirect.cgi?oast.me HTTP/1.1" 404 20965 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:21:26:11 +0000] "GET /cgi-bin/redirect.cgi?oast.me HTTP/1.1" 404 20965 "-" "Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:21:33:41 +0000] "GET /phpMyAdmin/index.php HTTP/1.1" 404 31 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "54.92.176.218"
...
show less
Bad Web Bot
🇪🇸
robotstxt
2026-07-13 19:37:39
(1 month ago)
107.154.68.25 - - [13/Jul/2026:18:55:01 +0000] "GET /cgi-bin/libagent.cgi?type=J HTTP/1.1" 404 20972 ...
show more
107.154.68.25 - - [13/Jul/2026:18:55:01 +0000] "GET /cgi-bin/libagent.cgi?type=J HTTP/1.1" 404 20972 "https://productos.aegon.es:443/cgi-bin/libagent.cgi?type=J" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:18:56:19 +0000] "GET /cgi-bin/cgiServer?worker=IndexNew HTTP/1.1" 404 20950 "https://productos.aegon.es:443/cgi-bin/cgiServer?worker=IndexNew" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:19:06:10 +0000] "GET /cgi-bin/eBEM6o.txt HTTP/1.1" 404 20969 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/85.0.4183.127 Safari/537.36" "54.92.176.218"
107.154.68.25 - - [13/Jul/2026:19:27:39 +0000] "GET /cgi-bin/cstecgi.cgi HTTP/1.1" 404 20977 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.0) Gecko/20100101 Firefox
...
show less
Bad Web Bot
🇺🇸
Matthew Ping
2026-05-01 11:45:01
(4 months ago)
ModSecurity rule 949110 triggered on syracuse. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇺🇸
Matthew Ping
2026-04-19 15:45:02
(4 months ago)
ModSecurity rule 949110 triggered on server. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
Anonymous
2024-03-25 13:38:54
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH