Anonymous
2026-11-10 15:06:55
UTC ·
(1 day ago)
[elearning.zebs.ch] httpd-suspicious-path: sites=www.newsletter.zebs.ch; logs=/var/log/httpd/domains/newsletter.zebs.ch.log; samples=/?author=1&_fields=slug | /?author=2&_fields=slug | /?author=3&_fields=slug
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-11-08 22:08:03
UTC ·
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
🇩🇪
LRob
2026-11-08 20:55:02
UTC ·
(2 days ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/155.0.8059.37 Mobile/15E | src_port: 55094
Bad Web Bot
🇱🇹
NotACaptcha
2026-11-03 02:05:37
UTC ·
(1 week ago)
2026-11-03T04:05:36.767511+02:00 3d3l kernel: banned.IN=venet0 OUT= MAC= SRC=156.230.182.91 LEN=52 TTL=109 ID=29373 DF TCP DPT=445 WINDOW=8192 SYN
Port Scan
🇺🇸
TPI-Abuse
2026-10-31 11:04:28
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 156.230.182.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 07:04:25.244131 2026] [security2:error] [pid 21247:tid 21247] [client 156.230.182.91:3246] ...
show more
(mod_security) mod_security (id:225170) triggered by 156.230.182.91 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 07:04:25.244131 2026] [security2:error] [pid 21247:tid 21247] [client 156.230.182.91:3246] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dd214chronicle.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dd214chronicle.org"] [uri "/wp-json/wp/v2/users"] [unique_id "auXLOc_-215cZnloK6J6iwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
georgengelmann
2026-10-30 12:00:21
UTC ·
(1 week ago)
Failed login attempt for admin
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-10-28 04:18:53
UTC ·
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
neckaralb-admin.de
2026-10-26 12:24:50
UTC ·
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇲🇹
Malta
2026-10-25 15:58:20
UTC ·
(2 weeks ago)
156.230.182.91 - - [25/Oct/2026:16:58:20 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
Brute-force password attempt
Hacking
Web App Attack
Brute-Force
Anonymous
2026-09-24 01:19:42
UTC ·
(1 month ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇮🇹
CoreTech srl
2026-09-21 08:45:03
UTC ·
(1 month ago)
cloudlinux2 fail2ban: 2026-09-21 10:39:12,953 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 147.161.160.199 - 2026-09-21 10:39:12cloudlinux2 fail2ban: 2026-09-21 10:39:12,055 fail2ban.filter [1598]: INFO [plesk-modsecur ...
show more
cloudlinux2 fail2ban: 2026-09-21 10:39:12,953 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 147.161.160.199 - 2026-09-21 10:39:12cloudlinux2 fail2ban: 2026-09-21 10:39:12,055 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 147.161.160.199 - 2026-09-21 10:39:12cloudlinux2 fail2ban: 2026-09-21 10:39:12,359 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 147.161.160.199 - 2026-09-21 10:39:12cloudlinux2 fail2ban: 2026-09-21 10:39:12,652 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 147.161.160.199 - 2026-09-21 10:39:12cloudlinux2 fail2ban: 2026-09-21 10:39:13,079 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Ban 147.161.160.199cloudlinux2 fail2ban: 2026-09-21 10:39:13,086 fail2ban.filter [1598]: INFO [recidive] Found 147.161.160.199 - 2026-09-21 10:39:13cloudlinux2 fail2ban: 2026-09-21 10:39:24,605 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 195.8.107.220 - 2026-09-21 10:39:24cloudlinux2 fail2b
show less
Web App Attack
🇺🇸
kosada.com
2026-09-20 20:06:20
UTC ·
(1 month ago)
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=69&topics%5B1%5D=43&topics%5B2%5D=55&topics%5B3%5D=79 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=69&topics%5B1%5D=43&topics%5B2%5D=55&topics%5B3%5D=79 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36")
show less
DDoS Attack
Bad Web Bot
Anonymous
2026-09-15 15:02:32
UTC ·
(1 month ago)
Attempt to POST to xmlrpc.php at 2026-09-15T15:02:32+00:00
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-09-14 08:43:56
UTC ·
(1 month ago)
cloudlinux2 fail2ban: 2026-09-14 10:39:12,520 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 156.230.182.91 - 2026-09-14 10:39:12cloudlinux2 fail2ban: 2026-09-14 10:39:20,544 fail2ban.filter [1908]: INFO [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-09-14 10:39:12,520 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 156.230.182.91 - 2026-09-14 10:39:12cloudlinux2 fail2ban: 2026-09-14 10:39:20,544 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 212.47.138.47 - 2026-09-14 10:39:20cloudlinux2 fail2ban: 2026-09-14 10:40:24,653 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 212.47.138.47 - 2026-09-14 10:40:24cloudlinux2 fail2ban: 2026-09-14 10:40:27,884 fail2ban.actions [1908]: NOTICE [plesk-modsecurity] Ban 156.230.182.91cloudlinux2 fail2ban: 2026-09-14 10:40:28,142 fail2ban.actions [1908]: NOTICE [recidive] Ban 156.230.182.91cloudlinux2 fail2ban: 2026-09-14 10:40:28,084 fail2ban.filter [1908]: INFO [recidive] Found 156.230.182.91 - 2026-09-14 10:40:27cloudlinux2 fail2ban: 2026-09-14 10:40:27,372 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 156.230.182.91 - 2026-09-14 10:40:27cloudlinux2 fail2ban: 2026-09-14 10:40:33,338 fail2ban.f
show less
Brute-Force
🇮🇹
CoreTech srl
2026-09-14 07:18:51
UTC ·
(1 month ago)
cloudlinux2 fail2ban: 2026-09-14 09:13:50,200 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 156.230.182.91 - 2026-09-14 09:13:49cloudlinux2 fail2ban: 2026-09-14 09:15:16,339 fail2ban.filter [1908]: INFO [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-09-14 09:13:50,200 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 156.230.182.91 - 2026-09-14 09:13:49cloudlinux2 fail2ban: 2026-09-14 09:15:16,339 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 116.102.217.154 - 2026-09-14 09:15:16cloudlinux2 fail2ban: 2026-09-14 09:15:15,156 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 156.230.182.91 - 2026-09-14 09:15:15cloudlinux2 fail2ban: 2026-09-14 09:16:10,328 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 116.102.217.154 - 2026-09-14 09:16:09cloudlinux2 fail2ban: 2026-09-14 09:16:19,453 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 156.230.182.91 - 2026-09-14 09:16:19cloudlinux2 fail2ban: 2026-09-14 09:16:20,178 fail2ban.filter [1908]: INFO [recidive] Found 156.230.182.91 - 2026-09-14 09:16:20cloudlinux2 fail2ban: 2026-09-14 09:16:18,160 fail2ban.actions [1908]: NOTICE [plesk-modsecurity] Unban 49.37.112.192cloudlinux2 fail2b
show less
Brute-Force