🇩🇪
ger-stg-sifi1
2026-10-27 10:47:57
(18 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
Blank
2026-10-26 20:14:46
(1 day ago)
Requested /wp-login.php, a path with no legitimate use on this server. Tripped an automated honeypot ...
show more
Requested /wp-login.php, a path with no legitimate use on this server. Tripped an automated honeypot.
show less
Bad Web Bot
Web App Attack
🇩🇪
v1nc
2026-10-04 09:04:04
(3 weeks ago)
173.239.224.98 - - [04/Oct/2026:09:04:03 +0000] "GET / HTTP/1.1" 200 432 "https://heinen.wedding/wp- ...
show more
173.239.224.98 - - [04/Oct/2026:09:04:03 +0000] "GET / HTTP/1.1" 200 432 "https://heinen.wedding/wp-content/plugins/neoncore-themes/O/SrHD3odefault.php?p=" "Go-http-client/1.1"
...
show less
Hacking
🇨🇭
SOC [GOLINE SA]
2026-10-04 06:17:45
(3 weeks ago)
IDS Alert: ET DROP Spamhaus DROP Listed Traffic Inbound group 36 === ATTACK === Signature: ET DROP S ...
show more
IDS Alert: ET DROP Spamhaus DROP Listed Traffic Inbound group 36 === ATTACK === Signature: ET DROP Spamhaus DROP Listed Traffic Inbound group 36 | SID: 2400035 | Severity: 2 | Category: Misc Attack === SOURCE === IP: 173.239.224.98 (IPv4) | Port: 5060 | Country: United States | ISP: LOGICWEB | rDNS: None === TARGET === Host: matomo.goline.ch | IP: 185.54.81.40 | Port: 42632 | Protocol: TCP | App: N/A === RESPONSE === Time: 2026-10-04 08:17:45 | Action: Blocked
show less
Exploited Host
Hacking
🇬🇷
setupgr
2026-09-14 07:48:24
(1 month ago)
(mod_security) mod_security (id:1000001) triggered by 173.239.224.98 (US/United States/Texas/Dallas/ ...
show more
(mod_security) mod_security (id:1000001) triggered by 173.239.224.98 (US/United States/Texas/Dallas/-/[AS396356 Latitude.sh]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:48:19.510740 2026] [security2:error] [pid 309628:tid 309658] [remote 173.239.224.98:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/about.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /wp-admin/about.php"] [severity "CRITICAL"] [tag "security"] [hostname "santoriniicon.com"] [uri "/wp-admin/about.php"] [unique_id "aqemw-xCVBfr5dN5RgYRjgAAxAM"], referer: https://santoriniicon.com/
show less
Port Scan
🇮🇩
zam
2026-09-14 06:10:46
(1 month ago)
173.239.224.98 - - [14/Sep/2026:06:10:43 +0000] "GET /wp-content/plugins/simple/simple.php/wp-admin/ ...
show more
173.239.224.98 - - [14/Sep/2026:06:10:43 +0000] "GET /wp-content/plugins/simple/simple.php/wp-admin/about.php HTTP/1.1" 404 81940
show less
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-11 14:54:19
(2 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-10 17:37:17
(2 months ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/-
Web App Attack
🇺🇸
nyt
2026-08-06 15:11:39
(2 months ago)
WP Author Enumeration, WP User Enumeration
Web App Attack
🇺🇸
CollideTech
2026-08-01 03:22:23
(2 months ago)
found poking around where they should not be
Bad Web Bot
Web App Attack
🇺🇸
Matthew Ping
2026-08-01 00:45:03
(2 months ago)
ModSecurity rule 949110 triggered on server. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇮🇳
Starburst SysOp Team
2026-07-29 23:50:58
(2 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-bom2-2)
Hacking
Bad Web Bot
🇩🇪
Nightreaver
2026-07-29 20:49:09
(2 months ago)
173.239.224.98 - - [29/Jul/2026:22:49:07 0200] "GET /redmine/.env HTTP/1.1" 404 493 "-" "Mozilla/5. ...
show more
173.239.224.98 - - [29/Jul/2026:22:49:07 0200] "GET /redmine/.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:105.0) Gecko/20100101 Firefox/105.0"
173.239.224.98 - - [29/Jul/2026:22:49:08 0200] "GET /__tests__/test-become/.env HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0"
173.239.224.98 - - [29/Jul/2026:22:49:08 0200] "GET /config/config.js HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
173.239.224.98 - - [29/Jul/2026:22:49:08 0200] "GET /web/config.js HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
173.239.224.98 - - [29/Jul/2026:22:49:09 0200] "GET /src/config.js HTTP/1.1" 404 493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"[...]
show less
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-07-29 11:46:04
(2 months ago)
Wordfence waf block on parsol
Web App Attack
🇺🇸
nyt
2026-07-23 01:07:02
(3 months ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
