๐ฒ๐พ
Rizzy
2026-08-05 07:40:10
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฌ๐ง
poundawebsiteltd
2026-08-04 09:34:08
(2 months ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 139.59.123 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 139.59.123.126 (SG/Singapore/-): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 139.59.123.126 (SG/Singapore/-): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-08-04 02:45:12
(2 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-04 02:08:56
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ฉ๐ช
Sรฉfora Srl
2026-08-03 22:03:44
(2 months ago)
Failed attempt detected by Fail2Ban in plesk-wordpress jail
Web App Attack
๐ฉ๐ช
wlt-blocker
2026-08-03 21:11:46
(2 months ago)
Unauthorized access to webpage admin
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-08-03 20:09:16
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-08-03 19:58:55
(2 months ago)
139.59.123.126 - - [03/Aug/2026:21:58:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9672 "https://die- ...
show more
139.59.123.126 - - [03/Aug/2026:21:58:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9672 "https://die-netzialisten.de/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
139.59.123.126 - - [03/Aug/2026:21:58:34 +0200] "POST /wp-login.php HTTP/1.1" 200 9678 "https://die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
139.59.123.126 - - [03/Aug/2026:21:58:54 +0200] "POST /wp-login.php HTTP/1.1" 200 9673 "https://die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-08-03 19:43:09
(2 months ago)
139.59.123.126 - - [03/Aug/2026:21:42:23 +0200] "POST /wp-login.php HTTP/1.1" 200 9673 "https://die- ...
show more
139.59.123.126 - - [03/Aug/2026:21:42:23 +0200] "POST /wp-login.php HTTP/1.1" 200 9673 "https://die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
139.59.123.126 - - [03/Aug/2026:21:42:50 +0200] "POST /wp-login.php HTTP/1.1" 200 9671 "https://die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
139.59.123.126 - - [03/Aug/2026:21:43:08 +0200] "POST /wp-login.php HTTP/1.1" 200 9671 "https://die-netzialisten.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐ฉ๐ช
stinpriza
2026-08-03 19:11:09
(2 months ago)
Web App Attack
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-08-03 19:05:07
(2 months ago)
2026-08-03 20:51:36 WordPress login error from 139.59.123.126: invalid_username && 2026-08-03 20:52: ...
show more
2026-08-03 20:51:36 WordPress login error from 139.59.123.126: invalid_username && 2026-08-03 20:52:04 WordPress login error from 139.59.123.126: invalid_username && 2026-08-03 20:52:30 WordPress login error from 139.59.123.126: invalid_username && 24 more within 20 minutes
show less
Brute-Force
๐ช๐ธ
alferez
2026-08-03 18:05:20
(2 months ago)
Multiple WP Login Attack
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-03 17:50:38
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 139.59.123.126 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.123.126 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 03 13:50:32.437030 2026] [security2:error] [pid 2377998:tid 2377998] [client 139.59.123.126:51559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||talentstar.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "talentstar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "anDU6KDAuROrT3P5cbGPwgAAAAQ"], referer: https://duckduckgo.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-08-03 16:40:36
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-08-03 02:02:03
(2 months ago)
CMS (WordPress or Joomla) brute force attempt.
Brute-Force