🇹🇷
rtbh.com.tr
2026-02-08 16:11:26
UTC ·
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2026-02-05 20:11:24
UTC ·
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷
SpaceHost-Server
2026-02-04 23:28:45
UTC ·
(9 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2026-02-04 20:11:24
UTC ·
(9 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
itsolon
2026-02-04 05:25:57
UTC ·
(9 months ago)
Fail2Ban plesk-modsecurity ban
Web App Attack
SSH
🇩🇪
macrob
2026-02-04 03:29:22
UTC ·
(9 months ago)
2026/02/04 03:29:20 [error] 265021#265021: *266868605 access forbidden by rule, client: 129.212.239.249, server: fastcredit.net.ua, request: "GET /wp-content/txets.php HTTP/2.0", host: "fastcredit.net.ua", referrer: "http://fastcredit.net.ua/wp-conte ...
show more
2026/02/04 03:29:20 [error] 265021#265021: *266868605 access forbidden by rule, client: 129.212.239.249, server: fastcredit.net.ua, request: "GET /wp-content/txets.php HTTP/2.0", host: "fastcredit.net.ua", referrer: "http://fastcredit.net.ua/wp-content/txets.php"
2026/02/04 03:29:20 [error] 265021#265021: *266868605 access forbidden by rule, client: 129.212.239.249, server: fastcredit.net.ua, request: "GET /wp-includes/txets.php HTTP/2.0", host: "fastcredit.net.ua", referrer: "http://fastcredit.net.ua/wp-includes/txets.php"
2026/02/04 03:29:21 [error] 265022#265022: *266869809 access forbidden by rule, client: 129.212.239.249, server: fastcredit.net.ua, request: "GET /wp-content/postnews.php HTTP/2.0", host: "fastcredit.net.ua", referrer: "http://fastcredit.net.ua/wp-content/postnews.php"
...
show less
Web App Attack
🇦🇺
Anytech
2026-02-04 03:12:26
UTC ·
(9 months ago)
CrowdSec detected: crowdsecurity/http-wordpress-scan
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-02-03 23:27:51
UTC ·
(9 months ago)
Brute-Force
Web App Attack
🇩🇪
Skyrider
2026-02-03 16:13:51
UTC ·
(9 months ago)
129.212.239.249 - - [03/Feb/2026:17:13:49 +0100] "GET /txets.php HTTP/2.0" 404 114 "http://esforces.com/txets.php" "Go-http-client/2.0"
129.212.239.249 - - [03/Feb/2026:17:13:50 +0100] "GET /wp-content/txets.php HTTP/2.0" 404 114 "http://esforces.com ...
show more
129.212.239.249 - - [03/Feb/2026:17:13:49 +0100] "GET /txets.php HTTP/2.0" 404 114 "http://esforces.com/txets.php" "Go-http-client/2.0"
129.212.239.249 - - [03/Feb/2026:17:13:50 +0100] "GET /wp-content/txets.php HTTP/2.0" 404 114 "http://esforces.com/wp-content/txets.php" "Go-http-client/2.0"
129.212.239.249 - - [03/Feb/2026:17:13:50 +0100] "GET /wp-admin/txets.php HTTP/2.0" 404 114 "http://esforces.com/wp-admin/txets.php" "Go-http-client/2.0"
129.212.239.249 - - [03/Feb/2026:17:13:51 +0100] "GET /wp-includes/txets.php HTTP/2.0" 404 114 "http://esforces.com/wp-includes/txets.php" "Go-http-client/2.0"
129.212.239.249 - - [03/Feb/2026:17:13:51 +0100] "GET /schallfuns.php HTTP/2.0" 404 114 "http://esforces.com/schallfuns.php" "Go-http-client/2.0"
show less
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2026-02-03 15:42:29
UTC ·
(9 months ago)
Triggered Cloudflare WAF (linkMaze) from SG.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/2 (GET method)
Endpoint: /wp-includes/postnews.php
UA: Go-http-client/2.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIP ...
show more
Triggered Cloudflare WAF (linkMaze) from SG.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/2 (GET method)
Endpoint: /wp-includes/postnews.php
UA: Go-http-client/2.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-02-03 15:11:51
UTC ·
(9 months ago)
FUNDATCOM WEBEXPLOIT 129.212.239.249 (129.212.239.249)
Web App Attack
🇩🇪
macrob
2026-02-03 14:11:50
UTC ·
(9 months ago)
2026/02/03 14:11:48 [error] 265023#265023: *265882780 access forbidden by rule, client: 129.212.239.249, server: finami.mx, request: "GET /wp-content/txets.php HTTP/2.0", host: "finami.mx", referrer: "http://finami.mx/wp-content/txets.php"
2026/02/03 ...
show more
2026/02/03 14:11:48 [error] 265023#265023: *265882780 access forbidden by rule, client: 129.212.239.249, server: finami.mx, request: "GET /wp-content/txets.php HTTP/2.0", host: "finami.mx", referrer: "http://finami.mx/wp-content/txets.php"
2026/02/03 14:11:49 [error] 265024#265024: *265882742 access forbidden by rule, client: 129.212.239.249, server: finami.mx, request: "GET /wp-admin/txets.php HTTP/2.0", host: "finami.mx", referrer: "http://finami.mx/wp-admin/txets.php"
2026/02/03 14:11:49 [error] 265023#265023: *265882785 access forbidden by rule, client: 129.212.239.249, server: finami.mx, request: "GET /wp-includes/txets.php HTTP/2.0", host: "finami.mx", referrer: "http://finami.mx/wp-includes/txets.php"
...
show less
Web App Attack
🇫🇷
Bensay
2026-02-03 14:10:01
UTC ·
(9 months ago)
[Tue Feb 03 15:10:00.407686 2026] [authz_core:error] [pid 1788006:tid 1788099] [client 129.212.239.249:50744] AH01630: client denied by server configuration: /var/www/empty/txets.php
[Tue Feb 03 15:10:00.637498 2026] [authz_core:error] [pid 1788006:t ...
show more
[Tue Feb 03 15:10:00.407686 2026] [authz_core:error] [pid 1788006:tid 1788099] [client 129.212.239.249:50744] AH01630: client denied by server configuration: /var/www/empty/txets.php
[Tue Feb 03 15:10:00.637498 2026] [authz_core:error] [pid 1788006:tid 1788101] [client 129.212.239.249:50744] AH01630: client denied by server configuration: /var/www/empty/wp-content
...
show less
Hacking
Bad Web Bot
Web App Attack
🇫🇷
vtchost.com
2026-02-03 05:02:53
UTC ·
(9 months ago)
known bad user agent
...
Bad Web Bot
🇩🇪
Philister11
2026-02-03 04:35:58
UTC ·
(9 months ago)
CrowdSec: crowdsecurity/http-wordpress-scan
Port Scan
Web App Attack