๐ฉ๐ช
ut-addicted.com
2026-10-10 05:44:42
(4 hours ago)
\[Sat Oct 10 07:44:41.449371 2026\] \[:error\] \[pid 17611:tid 140352430200576\] \[client 173.239.21 ...
show more
\[Sat Oct 10 07:44:41.449371 2026\] \[:error\] \[pid 17611:tid 140352430200576\] \[client 173.239.214.8:29621\] \[client 173.239.214.8\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/laravel/.env "\] \[unique_id "asnQyTGVXk1ns04Dx4AABQAAANM"\]
show less
Brute-Force
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-10 01:20:10
(9 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-10-09 23:49:01
(10 hours ago)
[ns65.kdns.gr] httpd-config-scan: sites=global; samples=/.env | /.env | /.env.save
Hacking
Web App Attack
๐ฆ๐บ
Bay13
2026-10-09 21:41:02
(12 hours ago)
CrowdSec:custom/http-probing
Web App Attack
๐ง๐พ
lns.bz
2026-10-09 20:48:03
(13 hours ago)
Too many 404 requests [BY]
Web App Attack
๐จ๐ฆ
Sakusen
2026-10-09 17:59:22
(16 hours ago)
Automated web attack: 118 reqs, 92 paths probed, 83 returned 404; probed: 32 .env, 22 .json, 21 .php ...
show more
Automated web attack: 118 reqs, 92 paths probed, 83 returned 404; probed: 32 .env, 22 .json, 21 .php, 15 other, 2 secret
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
lostswordfish.com
2026-10-02 20:54:04
(1 week ago)
Wordfence waf block on fairregistry
Web App Attack
๐บ๐ธ
dot.mg
2026-10-02 19:03:25
(1 week ago)
Abuse on login/xmlrpc
Brute-Force
๐ซ๐ท
masterguru
2026-09-30 12:47:20
(1 week ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)
Hacking
๐ฉ๐ช
ger-stg-sifi1
2026-09-21 12:26:34
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-09-21 05:45:31
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-21 05:06:54
(2 weeks ago)
[ti-30al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-30al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 173.239.214.8 - - [21/Sep/2026:07:06:01 +0200] "POST /wp-login.php HTTP/1.1" 200 10915 "https://heldergezegd.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:118.0) Gecko/20100101 Firefox/118.0"
173.239.214.8 - - [21/Sep/2026:07:06:12 +0200] "POST /wp-login.php HTTP/1.1" 200 5114 "https://heldergezegd.nl/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
173.239.214.8 - - [21/Sep/2026:07:06:22 +0200] "POST /wp-login.php HTTP/1.1" 200 5177 "https://heldergezegd.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
173.239.214.8 - - [21
...
show less
Brute-Force
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-20 22:23:57
(2 weeks ago)
cloudlinux2 fail2ban: 2026-09-21 00:19:31,292 fail2ban.filter [1597]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-21 00:19:31,292 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.214.8 - 2026-09-21 00:19:30cloudlinux2 fail2ban: 2026-09-21 00:19:36,729 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 136.144.33.155 - 2026-09-21 00:19:36cloudlinux2 fail2ban: 2026-09-21 00:19:34,882 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.214.8 - 2026-09-21 00:19:34cloudlinux2 fail2ban: 2026-09-21 00:19:36,328 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Unban 34.176.70.193cloudlinux2 fail2ban: 2026-09-21 00:20:00,099 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 68.38.251.81 - 2026-09-21 00:19:59cloudlinux2 fail2ban: 2026-09-21 00:21:03,701 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 193.142.38.121 - 2026-09-21 00:21:03cloudlinux2 fail2ban: 2026-09-21 00:21:02,297 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 212.87.218.181 - 2026-09-21 00:21:02cloudlinux2 fail2ban: 202
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-20 21:08:57
(2 weeks ago)
cloudlinux2 fail2ban: 2026-09-20 23:03:57,284 fail2ban.filter [1597]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-20 23:03:57,284 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.214.19 - 2026-09-20 23:03:56cloudlinux2 fail2ban: 2026-09-20 23:04:03,758 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.16.139.189 - 2026-09-20 23:04:03cloudlinux2 fail2ban: 2026-09-20 23:03:57,292 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.214.8 - 2026-09-20 23:03:56cloudlinux2 fail2ban: 2026-09-20 23:03:57,298 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.214.11 - 2026-09-20 23:03:56cloudlinux2 fail2ban: 2026-09-20 23:03:57,530 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 173.239.211.59 - 2026-09-20 23:03:57cloudlinux2 fail2ban: 2026-09-20 23:04:04,041 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Ban 34.16.139.189cloudlinux2 fail2ban: 2026-09-20 23:04:03,471 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.16.139.189 - 2026-09-20 23:04:03cloudlinux2 fail2ban: 20
show less
Web App Attack
๐ง๐ช
brechtr
2026-09-14 16:58:03
(3 weeks ago)
[Press84-BanHammer] bad username โ Sourced from: brechtryckaert.com โ Request: POST /wp-login.php
Brute-Force