🇩🇪
ghostwarriors
2026-09-05 17:20:05
(14 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-05 17:13:52
(15 hours ago)
167.172.42.153 - - [05/Sep/2026:19:13:49 +0200] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 4437 "- ...
show more
167.172.42.153 - - [05/Sep/2026:19:13:49 +0200] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 4437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15"
167.172.42.153 - - [05/Sep/2026:19:13:49 +0200] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 4433 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
167.172.42.153 - - [05/Sep/2026:19:13:49 +0200] "GET /blog HTTP/1.1" 301 4525 "https://[site]" "Mozilla/5.0 (X11; Linux i686; en-US) Gecko/20010604 Firefox/109.0"
167.172.42.153 - - [05/Sep/2026:19:13:49 +0200] "GET /blog HTTP/1.1" 301 4525 "https://[site]" "Mozilla/5.0 (X11; Linux i686; rv:1.9.5.20) Gecko/ Firefox/3.6.12"
167.172.42.153 - - [05/Sep/2026:19:13:49 +0200] "GET /blog HTTP/1.1" 301 4525 "https://[site]" "Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Safari/605.1.15"
167.172.42.1
show less
Web App Attack
Brute-Force
🇳🇴
jad-abuse
2026-08-23 23:24:33
(1 week ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 2 sensor(s); 8 hits.
show less
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-08-04 22:00:51
(1 month ago)
167.172.42.153 - - [04/Aug/2026:14:09:18 +0200] "GET / HTTP/1.1" 200 5447 "-" "Mozilla/5.0 (Macintos ...
show more
167.172.42.153 - - [04/Aug/2026:14:09:18 +0200] "GET / HTTP/1.1" 200 5447 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15"
167.172.42.153 - - [04/Aug/2026:14:09:19 +0200] "GET / HTTP/1.1" 200 5446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:103.0) Gecko/20100101 Firefox/103.0"
167.172.42.153 - - [04/Aug/2026:14:09:19 +0200] "GET /ghost/api/admin/authentication/setup/ HTTP/1.1" 404 4554 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
167.172.42.153 - - [04/Aug/2026:14:09:19 +0200] "POST /wp-admin/admin-ajax.php HTTP/1.1" 404 4554 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/5.0"
167.172.42.153 - - [04/Aug/2026:14:09:19 +0200] "GET / HTTP/1.1" 200 5448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0 Safari/602.4.8"
167.172.42.153 - - [04/Aug/2026:14:09:19 +0200] "GET / HT
show less
Web App Attack
Brute-Force
🇩🇪
yitzhaq
2026-07-26 19:36:15
(1 month ago)
167.172.42.153 - - [26/Jul/2026:21:36:14 +0200] "GET /blog HTTP/1.1" 301 4525 "https://[site]" "Mozi ...
show more
167.172.42.153 - - [26/Jul/2026:21:36:14 +0200] "GET /blog HTTP/1.1" 301 4525 "https://[site]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.182 Safari/537.36"
167.172.42.153 - - [26/Jul/2026:21:36:14 +0200] "GET /blog HTTP/1.1" 301 4538 "https://[site]" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
167.172.42.153 - - [26/Jul/2026:21:36:14 +0200] "GET / HTTP/1.1" 302 4525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15"
167.172.42.153 - - [26/Jul/2026:21:36:14 +0200] "GET / HTTP/1.1" 302 4526 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko)Safari/537.36"
167.172.42.153 - - [26/Jul/2026:21:36:14 +0200] "GET /blog HTTP/1.1" 301 4524 "https://[site]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.5.20"
167.172
show less
Web App Attack
Brute-Force
🇳🇴
jad-abuse
2026-07-15 16:25:02
(1 month ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 4 hits.
show less
Brute-Force
Web App Attack
🇳🇴
jad-abuse
2026-06-14 11:02:12
(2 months ago)
ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Ob ...
show more
ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 3 hits.
show less
Brute-Force
Web App Attack
🇺🇸
snappic
2025-11-29 06:37:02
(9 months ago)
Malicious URI path [GET /actuator/favicon.ico] [Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHT ...
show more
Malicious URI path [GET /actuator/favicon.ico] [Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36]
show less
Bad Web Bot
Web App Attack
🇺🇸
sumnone
2025-06-03 06:22:06
(1 year ago)
Port probing on unauthorized port 1000
Port Scan
Hacking
Exploited Host
🇩🇪
Packets-Decreaser.NET
2024-03-01 22:54:35
(2 years ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇩🇪
CommanderRoot
2024-02-15 07:09:17
(2 years ago)
HTTP request flood, even after hitting rate limiting
DDoS Attack
Web Spam
🇦🇺
MAGIC
2023-07-21 20:03:29
(3 years ago)
VM2 Bad user agents ignoring web crawling rules. Draining bandwidth
DDoS Attack
Bad Web Bot
🇨🇿
Countryman
2023-05-31 03:24:21
(3 years ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
Anonymous
2023-05-31 00:04:32
(3 years ago)
May 30 16:17:45 kernel: DROP IN=eth0 OUT= MAC=REDACTEDMYDEVICEMAC SRC=167.172.42.153 DST=REDACEDMYPU ...
show more
May 30 16:17:45 kernel: DROP IN=eth0 OUT= MAC=REDACTEDMYDEVICEMAC SRC=167.172.42.153 DST=REDACEDMYPUBLICIP LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=54146 DPT=81 SEQ=2642670515 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000
show less
DDoS Attack
Port Scan
Hacking
🇺🇸
MPL
2023-05-31 00:01:57
(3 years ago)
tcp/81 (2 or more attempts)
Port Scan