🇩🇪
FeG Deutschland
2026-09-30 13:10:43
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1245
Exploited Host
Web App Attack
🇬🇧
spamverify.com
2026-09-30 12:46:05
(3 hours ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-09-30 12:29:04
(3 hours ago)
(PERMBLOCK) 173.249.30.131 (FR/France/Bas-Rhin/Lauterbourg/-/[AS51167 Contabo GmbH]) has had more th ...
show more
(PERMBLOCK) 173.249.30.131 (FR/France/Bas-Rhin/Lauterbourg/-/[AS51167 Contabo GmbH]) has had more than 2 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: N/A
show less
Port Scan
🇩🇪
neckaralb-admin.de
2026-09-30 11:17:15
(5 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇬🇷
setupgr
2026-09-30 09:48:36
(6 hours ago)
(mod_security) mod_security (id:11000011) triggered by 173.249.30.131 (FR/France/Bas-Rhin/Lauterbour ...
show more
(mod_security) mod_security (id:11000011) triggered by 173.249.30.131 (FR/France/Bas-Rhin/Lauterbourg/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Sep 30 12:48:33.416355 2026] [security2:error] [pid 1945866:tid 1946038] [client 173.249.30.131:52660] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "contaboserver.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vmi3074797.contaboserver.net"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-login.php"] [unique_id "arza8fsrcZdb_Te4wjq43AAAApI"]
show less
Port Scan
🇹🇷
oalver
2026-09-30 05:04:13
(11 hours ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200); path_signature: request to /wp-login.php (HTTP 503). First seen: 2026-08-26. Risk score: 86/100.
show less
Web App Attack
🇲🇹
Malta
2026-09-30 04:29:23
(11 hours ago)
173.249.30.131 - - [30/Sep/2026:06:29:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
173.249.30.131 - - [30/Sep/2026:06:29:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇬🇷
setupgr
2026-09-29 17:15:56
(23 hours ago)
(mod_security) mod_security (id:11000011) triggered by 173.249.30.131 (FR/France/Bas-Rhin/Lauterbour ...
show more
(mod_security) mod_security (id:11000011) triggered by 173.249.30.131 (FR/France/Bas-Rhin/Lauterbourg/-/[AS51167 Contabo GmbH]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:15:53.658454 2026] [security2:error] [pid 1687108:tid 1687264] [client 173.249.30.131:36276] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "contaboserver.net" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: vmi3074797.contaboserver.net"] [severity "CRITICAL"] [hostname "fashionfragonard.gr"] [uri "/406.shtml/wp-login.php"] [unique_id "arvySXvchnJQfSJp4erlvQAAAlA"]
show less
Port Scan
🇩🇪
Hazzard
2026-09-29 10:44:56
(1 day ago)
(wordpress) Failed wordpress login from 173.249.30.131 (FR/France/Bas-Rhin/Lauterbourg/vmi3074797.co ...
show more
(wordpress) Failed wordpress login from 173.249.30.131 (FR/France/Bas-Rhin/Lauterbourg/vmi3074797.contaboserver.net/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇦🇺
A.i.D.A.N.N
2026-09-29 05:09:54
(1 day ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
🇬🇧
andypiper
2026-09-29 01:02:11
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇫🇷
✨
2026-09-29 00:12:12
(1 day ago)
Domain : anigma.co.uk
Rule : WEB
IP in black list
Port Scan
🇬🇧
spamverify.com
2026-09-28 19:25:34
(1 day ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇲🇹
Malta
2026-09-28 17:41:20
(1 day ago)
173.249.30.131 - - [28/Sep/2026:19:41:20 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
173.249.30.131 - - [28/Sep/2026:19:41:20 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.43 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/120.0.0.0"
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-09-28 10:15:46
(2 days ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-201)
Hacking