๐ฌ๐ง
Mendip_Defender
2026-07-24 06:16:09
(3 days ago)
139.59.79.98 - - [24/Jul/2026:07:15:46 +0100] "GET /wp-admin/css/ HTTP/1.1" 404 1227 "binance.com" " ...
show more
139.59.79.98 - - [24/Jul/2026:07:15:46 +0100] "GET /wp-admin/css/ HTTP/1.1" 404 1227 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.79.98 - - [24/Jul/2026:07:16:03 +0100] "GET /sites/default/files/ HTTP/1.1" 404 1227 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.79.98 - - [24/Jul/2026:07:16:09 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 1227 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ฎ๐ณ
evicky2002
2026-07-24 06:00:00
(3 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ณ๐ฑ
i-turnradio.nl
2026-07-24 03:18:38
(3 days ago)
2026-07-24 @ 05:18:38 (CET) ~ Blocked for trying to access: /wp-admin/css/
Web App Attack
๐ฒ๐พ
Rizzy
2026-07-24 00:17:35
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ซ๐ท
sthoyer.de
2026-07-23 15:50:45
(3 days ago)
139.59.79.98 - - [23/Jul/2026:17:50:20 +0200] "GET /wp-admin/css/ HTTP/1.1" 302 495 "binance.com" "M ...
show more
139.59.79.98 - - [23/Jul/2026:17:50:20 +0200] "GET /wp-admin/css/ HTTP/1.1" 302 495 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.79.98 - - [23/Jul/2026:17:50:25 +0200] "GET /wp-admin/css/ HTTP/1.1" 302 495 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.79.98 - - [23/Jul/2026:17:50:44 +0200] "GET /sites/default/files/ HTTP/1.1" 302 495 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
...
show less
Web App Attack
๐ง๐ช
Ivo Vynckier
2026-07-23 10:31:00
(3 days ago)
139.59.79.98 - - [23/Jul/2026:02:19:58 +0200] "GET /wp-admin/css/ HTTP/1.1" 301 299 "binance.com" "M ...
show more
139.59.79.98 - - [23/Jul/2026:02:19:58 +0200] "GET /wp-admin/css/ HTTP/1.1" 301 299 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
show less
Web App Attack
๐ต๐ฑ
sefinek.net
2026-07-23 10:20:15
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from IN.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from IN.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /wp-admin/css/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-07-23 07:40:28
(4 days ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐ฎ๐ฉ
Burayot
2026-07-23 06:16:00
(4 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.79.98 (IN/India/-): 1 in the ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 139.59.79.98 (IN/India/-): 1 in the last 3600 secs
show less
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-07-23 06:09:08
(4 days ago)
[Thu Jul 23 16:09:07.972246 2026] [security2:error] [pid 478091] [client 139.59.79.98:53174] [client ...
show more
[Thu Jul 23 16:09:07.972246 2026] [security2:error] [pid 478091] [client 139.59.79.98:53174] [client 139.59.79.98] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/modsecurity/crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "77"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.4"] [tag "anomaly-evaluation"] [hostname "stkildashule.org.au"] [uri "/wp-content/uploads/2026/07/"] [unique_id "amGwAx8gD7xKUAaNiuXIMwAAAAo"], referer: binance.com
...
show less
Web App Attack
๐ฉ๐ช
conseilgouz
2026-07-22 22:29:05
(4 days ago)
sle-7 : Trying access unauthorized files/dir=>/wp-admin/css/
Hacking
๐ฌ๐ง
Mendip_Defender
2026-07-22 20:47:41
(4 days ago)
139.59.79.98 - - [22/Jul/2026:21:47:23 +0100] "GET /wp-admin/css/ HTTP/1.1" 404 1227 "binance.com" " ...
show more
139.59.79.98 - - [22/Jul/2026:21:47:23 +0100] "GET /wp-admin/css/ HTTP/1.1" 404 1227 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.79.98 - - [22/Jul/2026:21:47:36 +0100] "GET /sites/default/files/ HTTP/1.1" 404 1227 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
139.59.79.98 - - [22/Jul/2026:21:47:40 +0100] "GET /admin/controller/extension/extension/ HTTP/1.1" 404 1227 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ฉ๐ช
conseilgouz
2026-07-22 09:24:46
(4 days ago)
vee-7 : Trying access unauthorized files/dir=>/wp-admin/css/
Hacking
๐ฒ๐พ
Rizzy
2026-07-22 07:24:00
(5 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐จ๐ฟ
ptlab
2026-07-22 06:45:30
(5 days ago)
Detected wp_admin attack from WP-host.
Hacking
Web App Attack