๐ช๐ธ
robotstxt
2026-10-21 09:40:06
(6 days ago)
157.245.150.116 - - [21/Oct/2026:09:38:29 +0000] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1 ...
show more
157.245.150.116 - - [21/Oct/2026:09:38:29 +0000] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/1.1" 403 54464 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="157.245.150.116"
157.245.150.116 - - [21/Oct/2026:09:38:38 +0000] "GET /wp-content/plugins/NexusLeadsReal/mini.php HTTP/1.1" 403 54504 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="157.245.150.116"
157.245.150.116 - - [21/Oct/2026:09:38:55 +0000] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/1.1" 403 54463 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-" edge="157.245.150.116"
157.245.150.116 - - [21/Oct/2026:09:39:12 +0000] "GET /wp-content/plugins/Core-Econ/upH
...
show less
Web App Attack
๐บ๐ธ
dot.mg
2026-10-21 05:04:05
(6 days ago)
Scan of vulnerable files
Web App Attack
Anonymous
2026-10-21 01:01:19
(6 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ช๐ธ
robotstxt
2026-10-20 19:19:03
(6 days ago)
157.245.150.116 - - [20/Oct/2026:19:18:11 +0000] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/2.0 ...
show more
157.245.150.116 - - [20/Oct/2026:19:18:11 +0000] "GET /wp-content/plugins/dhon/newsfeed.php HTTP/2.0" 403 48159 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "157.245.150.116" edge="104.23.175.34"
157.245.150.116 - - [20/Oct/2026:19:18:23 +0000] "GET /wp-content/plugins/NexusLeadsReal/mini.php HTTP/2.0" 403 48160 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "157.245.150.116" edge="172.71.81.140"
157.245.150.116 - - [20/Oct/2026:19:18:25 +0000] "GET /wp-content/plugins/wpcall-button/button-image.php HTTP/2.0" 403 48161 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "157.245.150.116" edge="172.71.81.140"
157.245.150.116 - - [20/Oct/2026:19:18:32 +0000] "G
...
show less
Web App Attack
Anonymous
2026-10-20 18:40:09
(6 days ago)
[osotir.org] httpd-shell-path-probe: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.lo ...
show more
[osotir.org] httpd-shell-path-probe: sites=www.osotir.org; logs=/var/log/httpd/domains/osotir.org.log; samples=/wp-content/plugins/NexusLeadsReal/mini.php
show less
Hacking
Web App Attack
๐ช๐ธ
pipeline.es
2026-10-20 17:50:56
(1 week ago)
WordPress exploit attempt blocked by WAF | URL: https://news.ceav.info/wp-admin/network/index.php | ...
show more
WordPress exploit attempt blocked by WAF | URL: https://news.ceav.info/wp-admin/network/index.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-10-20T17:48:27Z\",\"action\":\"blocked:waf\",\"description\":\"Known malicious User-Agents\",\"srcip\":\"157.245.150.116\",\"status_code\":403,\"url\":\"https://news.ceav.info/wp-admin/network/index.php\",\"user_agent\":\"Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 M | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-10-20 14:54:53
(1 week ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ช๐ธ
pipeline.es
2026-10-20 09:23:17
(1 week ago)
WordPress exploit attempt blocked by WAF | URL: https://costaeste.es/wp-content/plugins/index.php | ...
show more
WordPress exploit attempt blocked by WAF | URL: https://costaeste.es/wp-content/plugins/index.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-10-20T09:22:07Z\",\"action\":\"blocked:waf\",\"description\":\"Known malicious User-Agents\",\"srcip\":\"157.245.150.116\",\"status_code\":403,\"url\":\"https://costaeste.es/wp-content/plugins/index.php\",\"user_agent\":\"Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 M | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Web App Attack
๐ฎ๐น
VHosting
2026-10-20 02:35:03
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-10-18 20:09:56
(1 week ago)
2026-10-18T22:09:56.087710+02:00 polaris wp(sahpa.co.za)[3463888]: Blocked authentication attempt fo ...
show more
2026-10-18T22:09:56.087710+02:00 polaris wp(sahpa.co.za)[3463888]: Blocked authentication attempt for mat.lanot from 157.245.150.116
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-18 19:42:24
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐ช๐ธ
pipeline.es
2026-10-18 17:19:38
(1 week ago)
WordPress login brute-force | URL: https://costaeste.es/wp-login.php | Evidence: {\"integration\":\" ...
show more
WordPress login brute-force | URL: https://costaeste.es/wp-login.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-10-18T17:17:18Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\"157.245.150.116\",\"status_code\":503,\"url\":\"https://costaeste.es/wp-login.php\",\"user_agent\":\"Mozila/5.0\",\"wfid\":4738859} | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Brute-Force
๐ง๐ช
Saec
2026-10-18 17:18:06
(1 week ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (2ร on saec.me)
Port Scan
Web App Attack