๐ง๐ช
Saec
2026-10-22 19:20:03
(2 hours ago)
Jarvis auto-ban: CF honeypot path /wp-login.php (1ร on saec.me)
Port Scan
Web App Attack
๐ช๐ธ
pipeline.es
2026-10-22 16:53:18
(4 hours ago)
WordPress login brute-force | URL: https://gacetadelturismo.com/wp-login.php | Evidence: {\"integrat ...
show more
WordPress login brute-force | URL: https://gacetadelturismo.com/wp-login.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-10-22T16:50:58Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\"169.150.196.238\",\"status_code\":503,\"url\":\"https://gacetadelturismo.com/wp-login.php\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.170 Safari/537.36\",\"wfid\":4740368 | ASN: Datacamp Limited | Country: NL
show less
Brute-Force
๐ซ๐ท
fmomo3143
2026-10-22 09:25:51
(12 hours ago)
cie-7 : Trying access unauthorized files/dir=>/administrator/wp-admin/
Hacking
Anonymous
2026-10-22 09:02:41
(12 hours ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
๐ฌ๐ท
setupgr
2026-10-22 02:56:02
(18 hours ago)
(mod_security) mod_security (id:11000011) triggered by 169.150.196.238 (NL/The Netherlands/North Hol ...
show more
(mod_security) mod_security (id:11000011) triggered by 169.150.196.238 (NL/The Netherlands/North Holland/Amsterdam/-/[AS212238 Datacamp Limited]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:55:59.126902 2026] [security2:error] [pid 407796:tid 407925] [client 169.150.196.238:64413] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "datapacket.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: unn-169-150-196-238.datapacket.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/wp-login.php"] [unique_id "atl7P1JUWG3YDv6xVtXCEgAAAUU"], referer: https://asteriassantorini.com/wp-login.php
show less
Port Scan
๐จ๐ญ
backslash
2026-10-21 18:33:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ฌ๐ท
setupgr
2026-10-21 14:23:32
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 169.150.196.238 (NL/The Netherlands/North Hol ...
show more
(mod_security) mod_security (id:11000011) triggered by 169.150.196.238 (NL/The Netherlands/North Holland/Amsterdam/-/[AS212238 Datacamp Limited]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Oct 21 17:23:30.284150 2026] [security2:error] [pid 232375:tid 232527] [client 169.150.196.238:38719] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "datapacket.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: unn-169-150-196-238.datapacket.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/wp-login.php"] [unique_id "atjK4omZmlF1A9ga-PkxdgAAAg0"], referer: https://www.setworldup.com/wp-login.php
show less
Port Scan
๐ธ๐ช
vaia.cloud
2026-10-21 10:35:02
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ง๐ท
Peregrine
2026-10-21 08:43:34
(1 day ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 169.150.196.238 162.159.113.91 - - [21/Oct/2026:05: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 169.150.196.238 162.159.113.91 - - [21/Oct/2026:05:43:24 -0300] "GET /wp-login.php HTTP/1.1" 404 18193
show less
Bad Web Bot
Anonymous
2026-10-21 05:02:18
(1 day ago)
2026-10-21T07:02:18.674631+02:00 polaris wp(sahpa.co.za)[53766]: Blocked authentication attempt for ...
show more
2026-10-21T07:02:18.674631+02:00 polaris wp(sahpa.co.za)[53766]: Blocked authentication attempt for Lisa from 169.150.196.238
...
show less
Brute-Force
Web App Attack
๐ง๐ท
Peregrine
2026-10-21 00:29:02
(1 day ago)
Fail2Ban Jail:IU tomcat-honeypot | Evidence: - 169.150.196.238 - - [20/Oct/2026:21:28:54 -0300] "GET ...
show more
Fail2Ban Jail:IU tomcat-honeypot | Evidence: - 169.150.196.238 - - [20/Oct/2026:21:28:54 -0300] "GET /~ecomuna/wp-login.php HTTP/1.1" 404 -
- 169.150.196.238 - - [20/Oct/2026:21:28:54 -0300] "GET /~ecomuna/wp-admin/ HTTP/1.1" 404 -
- 169.150.196.238 - - [20/Oct/2026:21:28:55 -0300] "GET /wp-login.php HTTP/1.1" 404 -
- 169.150.196.238 - - [20/Oct/2026:21:28:55 -0300] "GET /wp-admin/ HTTP/1.1" 404 -
show less
Bad Web Bot
๐บ๐ธ
kosada.com
2026-08-25 13:43:59
(1 month ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
๐ง๐ช
cmbplf
2026-05-16 07:38:05
(5 months ago)
247 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) Appl ...
show more
247 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3
show less
Brute-Force
Bad Web Bot
๐ง๐ช
cmbplf
2026-05-13 04:38:12
(5 months ago)
5 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleW ...
show more
5 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 15_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/19G82 Instagram 306.0.0.20.118 (iPhone12,1; iOS 15_6_1; en_GB; en; scale=2.00; 828x1792; 529083166) NW/3
show less
Brute-Force
Bad Web Bot
๐น๐ท
rtbh.com.tr
2025-11-04 20:09:44
(11 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force