|
๐จ๐ญ
backslash
|
|
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
|
Bad Web Bot
|
|
|
๐ฒ๐น
Malta
|
|
151.123.176.8 - - [05/Jul/2026:08:37:02 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ...
show more
151.123.176.8 - - [05/Jul/2026:08:37:02 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
|
Hacking
Web App Attack
|
|
|
Anonymous
|
|
Web attack blocked by Wordfence on helenehoenjet.nl (1 hit). Reported by CRMON.
|
Web App Attack
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 151.123.176.8 (FR/France/รยle-de-France/Paris/- ...
show more
(mod_security) mod_security (id:900001) triggered by 151.123.176.8 (FR/France/รยle-de-France/Paris/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 18:35:07.952459 2026] [security2:error] [pid 358184:tid 358237] [client 151.123.176.8:52671] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-login.php"] [unique_id "aj1Kq6O2mzdLeHxqn3plVwAAAVI"], referer: https://mail.doityourself.gr/wp-login.php
show less
|
Port Scan
|
|
|
๐ฆ๐บ
MAGIC
|
|
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|
|
๐ซ๐ท
ELYAZ
|
|
(y4) Failed scan -byebye- from 151.123.176.8 (FR/France/-): (CF_ENABLE)
|
Hacking
|
|
|
๐ฉ๐ช
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
|
Exploited Host
Web App Attack
|
|
|
๐ฆ๐บ
paulshipley.com.au
|
|
[Tue Jun 23 09:04:47.989127 2026] [security2:error] [pid 175134] [client 151.123.176.8:42283] [clien ...
show more
[Tue Jun 23 09:04:47.989127 2026] [security2:error] [pid 175134] [client 151.123.176.8:42283] [client 151.123.176.8] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "ajm_j9jyxnRBxhVRFxBWQwAAAAc"]
...
show less
|
Web App Attack
|
|
|
๐ฉ๐ช
LRob
|
|
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
|
Bad Web Bot
Web App Attack
|
|
|
๐ฉ๐ช
iNetWorker
|
|
trolling for resource vulnerabilities
|
Web App Attack
|
|
|
๐ซ๐ท
ELYAZ
|
|
(y4) Failed scan -byebye- from 151.123.176.8 (FR/France/-): (CF_ENABLE)
|
Hacking
|
|
|
๐ฑ๐ป
garmtech.com
|
|
IM360 WAF: Prohibited WordPress username login/registration
|
Web App Attack
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 151.123.176.8 (FR/France/รยle-de-France/Paris/- ...
show more
(mod_security) mod_security (id:900001) triggered by 151.123.176.8 (FR/France/รยle-de-France/Paris/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 21:47:03.490220 2026] [security2:error] [pid 2210295:tid 2210448] [client 151.123.176.8:59519] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: cpanagiotou.gr"] [severity "CRITICAL"] [tag "security"] [hostname "cpanagiotou.gr"] [uri "/wp-login.php"] [unique_id "ajLrp4Hi3fYqxwKQHNaOOgAAAdY"], referer: https://cpanagiotou.gr/wp-login.php
show less
|
Port Scan
|
|
|
๐บ๐ธ
lostswordfish.com
|
|
Wordfence waf block on restore georgia
|
Web App Attack
|
|
|
๐ฆ๐บ
paulshipley.com.au
|
|
winesbydesign.com.au:443 151.123.176.8 - - [17/Jun/2026:06:11:12 +1000] "GET /?author=1 HTTP/1.1" 40 ...
show more
winesbydesign.com.au:443 151.123.176.8 - - [17/Jun/2026:06:11:12 +1000] "GET /?author=1 HTTP/1.1" 404 208689 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|