๐ฉ๐ช
LRob.fr
2026-06-18 09:15:21
(48 minutes ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
๐ซ๐ท
masterguru
2026-06-18 09:10:39
(52 minutes ago)
(PERMBLOCK) 141.94.170.164 (FR/France/ns3203812.ip-141-94-170.eu) has had more than 4 temp blocks in ...
show more
(PERMBLOCK) 141.94.170.164 (FR/France/ns3203812.ip-141-94-170.eu) has had more than 4 temp blocks in the last 86400 secs (0-201)
show less
Hacking
๐บ๐ธ
dtorrer
2026-06-18 08:56:03
(1 hour ago)
Forged login request.
Brute-Force
๐ซ๐ท
SpaceHost-Server
2026-06-18 08:55:46
(1 hour ago)
141.94.170.164 - - [18/Jun/2026:10:55:05 +0200] "POST /wp-login.php HTTP/1.1" 200 20783 "https://gan ...
show more
141.94.170.164 - - [18/Jun/2026:10:55:05 +0200] "POST /wp-login.php HTTP/1.1" 200 20783 "https://ganznatur-vital.de/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
141.94.170.164 - - [18/Jun/2026:10:55:29 +0200] "POST /wp-login.php HTTP/1.1" 200 15477 "https://focusingausbildung.wp-knowhow.de/wp-login.php" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
141.94.170.164 - - [18/Jun/2026:10:55:44 +0200] "POST /wp-login.php HTTP/1.1" 200 21491 "https://testaccount-fanderl.webseiten.ws/wp-login.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
๐จ๐ฆ
KIsmay
2026-06-18 08:54:35
(1 hour ago)
Jun 17 22:11:27 ismay WPAudit[2177404]: 141.94.170.164 christinesutherland.com "Mozilla/5.0 (X11; Li ...
show more
Jun 17 22:11:27 ismay WPAudit[2177404]: 141.94.170.164 christinesutherland.com "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" denis:com17 FAIL
Jun 17 23:27:44 ismay WPAudit[2139566]: 141.94.170.164 ismay.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" admin:ca1234 FAIL
Jun 17 23:49:21 ismay WPAudit[2139566]: 141.94.170.164 www.ismay.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0" kirk:ca14 FAIL
Jun 18 01:15:57 ismay WPAudit[2139566]: 141.94.170.164 ismay.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" kirk:[email protected] FAIL
Jun 18 01:54:34 ismay WPAudit[2176729]: 141.94.170.164 www.ismay.ca "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" admin:Ca@1234 FAIL
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-06-18 08:54:14
(1 hour ago)
Unauthorized access to webpage admin
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-18 08:50:53
(1 hour ago)
(mod_security) mod_security (id:225170) triggered by 141.94.170.164 (ns3203812.ip-141-94-170.eu): 1 ...
show more
(mod_security) mod_security (id:225170) triggered by 141.94.170.164 (ns3203812.ip-141-94-170.eu): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 04:50:48.121017 2026] [security2:error] [pid 9226:tid 9226] [client 141.94.170.164:52406] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thewhispertwins.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thewhispertwins.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "ajOxaGJyYkssLnBgexoHyQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
tentwentyfour
2026-06-18 08:43:17
(1 hour ago)
141.94.170.164 - - [18/Jun/2026:10:32:05 +0200] "POST /wp-login.php HTTP/2.0" 200 3109 "https://kd.d ...
show more
141.94.170.164 - - [18/Jun/2026:10:32:05 +0200] "POST /wp-login.php HTTP/2.0" 200 3109 "https://kd.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
141.94.170.164 - - [18/Jun/2026:10:33:04 +0200] "POST /wp-login.php HTTP/2.0" 200 3115 "https://rollrasen.debug.lu/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
141.94.170.164 - - [18/Jun/2026:10:34:39 +0200] "POST /wp-login.php HTTP/2.0" 200 3115 "https://brennpunkt.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
141.94.170.164 - - [18/Jun/2026:10:35:37 +0200] "POST /wp-login.php HTTP/2.0" 200 3115 "https://yfb.debug.lu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
141.94.170.164 - - [
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Hazzard
2026-06-18 08:39:41
(1 hour ago)
(PERMBLOCK) 141.94.170.164 (FR/France/-/-/ns3203812.ip-141-94-170.eu/[redacted]) has had more than 4 ...
show more
(PERMBLOCK) 141.94.170.164 (FR/France/-/-/ns3203812.ip-141-94-170.eu/[redacted]) has had more than 4 temp blocks
show less
Hacking
๐บ๐ธ
TAY
2026-06-18 08:38:25
(1 hour ago)
141.94.170.164 - - [18/Jun/2026:16:35:55 +0800] "POST /wp-login.php HTTP/1.1" 200 2576 "https://petf ...
show more
141.94.170.164 - - [18/Jun/2026:16:35:55 +0800] "POST /wp-login.php HTTP/1.1" 200 2576 "https://petfos.my/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
141.94.170.164 - - [18/Jun/2026:16:37:57 +0800] "POST /wp-login.php HTTP/1.1" 200 2682 "https://www.littleprairie.com.my/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0"
141.94.170.164 - - [18/Jun/2026:16:38:25 +0800] "POST /wp-login.php HTTP/1.1" 200 2487 "https://liquidssmith.com/wp-login.php" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Brute-Force
๐ซ๐ท
masterguru
2026-06-18 08:38:00
(1 hour ago)
(PERMBLOCK) 141.94.170.164 (FR/France/ns3203812.ip-141-94-170.eu) has had more than 4 temp blocks in ...
show more
(PERMBLOCK) 141.94.170.164 (FR/France/ns3203812.ip-141-94-170.eu) has had more than 4 temp blocks in the last 86400 secs (0-197)
show less
Hacking
๐ฉ๐ช
bsoft.de
2026-06-18 08:35:50
(1 hour ago)
141.94.170.164 - - [18/Jun/2026:10:24:57 +0200] "GET /wp-login.php HTTP/1.1" 404 132012 "-" "Mozilla ...
show more
141.94.170.164 - - [18/Jun/2026:10:24:57 +0200] "GET /wp-login.php HTTP/1.1" 404 132012 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_10) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
141.94.170.164 - - [18/Jun/2026:10:32:21 +0200] "GET /wp-login.php HTTP/1.1" 404 70046 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
141.94.170.164 - - [18/Jun/2026:10:35:49 +0200] "GET /wp-login.php HTTP/1.1" 404 62527 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
show less
Web App Attack
๐ฉ๐ช
AlexEventfahrtenIPDB
2026-06-18 08:35:17
(1 hour ago)
[Thu Jun 18 10:35:16.647860 2026] [authz_core:error] [pid 1322096:tid 1322096] [client 141.94.170.16 ...
show more
[Thu Jun 18 10:35:16.647860 2026] [authz_core:error] [pid 1322096:tid 1322096] [client 141.94.170.164:45192] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php
[Thu Jun 18 10:35:16.912044 2026] [authz_core:error] [pid 1267931:tid 1267931] [client 141.94.170.164:45202] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.spdns.de/wp-login.php
...
show less
Brute-Force
Web App Attack
๐จ๐ฟ
plzenskypruvodce.cz
2026-06-18 08:32:09
(1 hour ago)
2026-06-18T10:32:08.540972+02:00 web wordpress(varhanykolin.cz)[3792259]: Immediately block connecti ...
show more
2026-06-18T10:32:08.540972+02:00 web wordpress(varhanykolin.cz)[3792259]: Immediately block connections from 141.94.170.164
...
show less
Brute-Force
Anonymous
2026-06-18 08:16:38
(1 hour ago)
[Thu Jun 18 10:16:37.749291 2026] [authz_core:error] [pid 97492:tid 97596] [client 141.94.170.164:54 ...
show more
[Thu Jun 18 10:16:37.749291 2026] [authz_core:error] [pid 97492:tid 97596] [client 141.94.170.164:54578] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Thu Jun 18 10:16:37.801680 2026] [authz_core:error] [pid 97492:tid 97601] [client 141.94.170.164:54578] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php, referer: https://akcurate.de/wp-login.php
...
show less
Brute-Force
Web App Attack