🇬🇷
setupgr
2026-07-23 00:11:54
(1 hour ago)
(mod_security) mod_security (id:100011) triggered by 136.144.33.209 (US/United States/California/Los ...
show more
(mod_security) mod_security (id:100011) triggered by 136.144.33.209 (US/United States/California/Los Angeles/-/[AS206092 SECFIREWALLAS]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 23 03:11:53.198764 2026] [security2:error] [pid 29186:tid 29362] [client 136.144.33.209:39309] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-login.php"] [unique_id "amFcSacnvKWxTrKzHawtUQAAAw0"]
show less
Port Scan
🇮🇹
CoreTech srl
2026-07-22 12:23:57
(13 hours ago)
cloudlinux2 fail2ban: 2026-07-22 14:19:00,047 fail2ban.filter [1589]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-22 14:19:00,047 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 45.3.38.233 - 2026-07-22 14:18:59cloudlinux2 fail2ban: 2026-07-22 14:19:02,267 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 65.111.13.145 - 2026-07-22 14:19:02cloudlinux2 fail2ban: 2026-07-22 14:19:01,217 fail2ban.filter [1589]: INFO [plesk-wordpress] Found 65.111.25.85 - 2026-07-22 14:19:01cloudlinux2 fail2ban: 2026-07-22 14:19:59,304 fail2ban.filter [1589]: INFO [plesk-apache] Found 77.223.244.36 - 2026-07-22 14:19:59cloudlinux2 fail2ban: 2026-07-22 14:20:08,418 fail2ban.filter [1589]: INFO [plesk-apache] Found 139.135.200.47 - 2026-07-22 14:20:08cloudlinux2 fail2ban: 2026-07-22 14:20:12,497 fail2ban.filter [1589]: INFO [plesk-apache] Found 112.200.122.157 - 2026-07-22 14:20:12cloudlinux2 fail2ban: 2026-07-22 14:20:42,483 fail2ban.actions [1589]: NOTICE [plesk-modsecurity] Unban 156.205.80.155cloudlinux2 fail2ban: 2026-07-22 14:2
show less
Web App Attack
🇺🇸
Peter Racine
2026-07-22 12:08:00
(14 hours ago)
Credential stuffing - exchange accounts
Brute-Force
🇷🇴
SpamStopper
2026-07-22 08:44:57
(17 hours ago)
Fail2Ban - WP Spoofing
Port Scan
Brute-Force
Web App Attack
2026-07-22 06:47:33
(19 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇨🇱
SinaiCL
2026-07-22 03:55:13
(22 hours ago)
WAF Multiple Hits
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-07-22 01:48:46
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
dynamix
2026-07-22 01:22:17
(1 day ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-21 19:36:59
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
lostswordfish.com
2026-07-21 19:22:03
(1 day ago)
Wordfence waf block on parsol
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-21 08:12:59
(1 day ago)
balcomberetreat.com.au:443 136.144.33.209 - - [21/Jul/2026:18:12:49 +1000] "GET /?author=1 HTTP/1.1" ...
show more
balcomberetreat.com.au:443 136.144.33.209 - - [21/Jul/2026:18:12:49 +1000] "GET /?author=1 HTTP/1.1" 404 760 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
...
show less
Web App Attack
🇳🇱
ByeByte API
2026-07-21 07:32:43
(1 day ago)
byebyte.space auth: GET /wp-login.php at 2026-07-21T07:32:43Z. Honeypot path hit; firewall auto-bann ...
show more
byebyte.space auth: GET /wp-login.php at 2026-07-21T07:32:43Z. Honeypot path hit; firewall auto-banned the IP for 24h. UA: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15'. Accept-Encoding: 'gzip, br'. Country (CF): US. TLS info: {"scheme":"https"}.
show less
Web App Attack
Port Scan
🇩🇪
bryth
2026-07-21 07:02:51
(1 day ago)
Wordpress login/xmlrpc abuse (Tue Jul 21 06:45:51 AM UTC 2026)
Hacking
Web App Attack
🇫🇷
Yepngo
2026-07-20 04:48:36
(2 days ago)
136.144.33.209 - - [20/Jul/2026:06:48:15 +0200] "POST /wp-login.php HTTP/2.0" 200 11353 "-" "Mozilla ...
show more
136.144.33.209 - - [20/Jul/2026:06:48:15 +0200] "POST /wp-login.php HTTP/2.0" 200 11353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
136.144.33.209 - - [20/Jul/2026:06:48:35 +0200] "POST /wp-login.php HTTP/2.0" 200 11353 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
...
show less
Brute-Force
Web App Attack
🇺🇸
xxkodedxx
2026-07-19 01:53:35
(4 days ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Active: 01:53:21 UTC
Volume: 1 honeypot probe(s)
Bait taken: /wp-includes/css/buttons.css
UA: "Go-http-client/1.1"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack