🇬🇧
OptimusGO
2026-06-21 04:03:04
(1 day ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-06-21 05:03:04 UTC
Log evidence:
06/21/2026-05:03:02.498474 [**] [1:1000090:1] POLICY Unauthorized Management Port Access [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 174.138.53.106:80 -> 185.127.18.66:6379
06/21/2026-05:03:02.498474 [**] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 174.138.53.106:80 -> 185.127.18.66:6379
show less
Port Scan
Brute-Force
🇦🇺
PetePK
2026-06-21 03:59:02
(1 day ago)
Probed 1 time(s): TCP/6379
Port Scan
🇦🇹
centurion
2026-06-21 03:36:33
(1 day ago)
Unauthorized attempt on coresecret [6379/tcp]
Source port: 80
TTL: 246
Packet length: 44
TOS: 0x02
h ...
show more
Unauthorized attempt on coresecret [6379/tcp]
Source port: 80
TTL: 246
Packet length: 44
TOS: 0x02
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
Petre 21_ip
2026-06-21 03:34:35
(1 day ago)
2026-06-21T05:34:33.615604+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ...
show more
2026-06-21T05:34:33.615604+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=174.138.53.106 DST=155.133.26.57 LEN=44 TOS=0x02 PREC=0x00 TTL=245 ID=26437 PROTO=TCP SPT=80 DPT=6379 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇩🇪
_ArminS_
2026-06-18 01:26:53
(4 days ago)
SP-Scan 61011:8882 detected 2026.06.18 03:26:53
blocked until 2026.08.06 20:29:40
Port Scan
🇳🇱
homeshowdomain.nl
2026-05-19 22:04:31
(1 month ago)
Auto-ban: >3000 req/min op 2026-05-19
Web App Attack
SSH
Hacking
🇫🇷
masterguru
2026-05-19 03:17:14
(1 month ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-195)
Hacking
🇳🇱
Mangelot Hosting
2026-05-19 03:14:31
(1 month ago)
(wp_login_try) srv104 WP Login Attempt 174.138.53.106 (US/United States/-): 10 in the last 3600 secs ...
show more
(wp_login_try) srv104 WP Login Attempt 174.138.53.106 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇮🇹
VHosting
2026-05-19 03:05:03
(1 month ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
Sysadmin Peter
2026-05-19 02:53:53
(1 month ago)
174.138.53.106 - - [19/May/2026:04:47:01 +0200] "POST /wp-login.php HTTP/1.1" 200 10253 "-" "Mozilla ...
show more
174.138.53.106 - - [19/May/2026:04:47:01 +0200] "POST /wp-login.php HTTP/1.1" 200 10253 "-" "Mozilla/5.0"
174.138.53.106 - - [19/May/2026:04:53:52 +0200] "POST /wp-login.php HTTP/1.1" 200 10260 "-" "Mozilla/5.0"
...
show less
Brute-Force
Web App Attack
🇩🇪
maxpower
2026-05-19 02:30:58
(1 month ago)
(wp_login) REGOLA 1 - WP Login Attack 174.138.53.106 (US/United States/-): 5 in the last 3600 secs; ...
show more
(wp_login) REGOLA 1 - WP Login Attack 174.138.53.106 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 174.138.53.106 - - [19/May/2026:03:59:29 +0200] "GET /wp-login.php HTTP/1.1" 301 284 "-" "Mozilla/5.0" "-" host=neiataviaggi.it
174.138.53.106 - - [19/May/2026:03:59:31 +0200] "GET /wp-login.php HTTP/1.1" 404 2259 "-" "Mozilla/5.0" "-" host=neiataviaggi.it
174.138.53.106 - - [19/May/2026:03:59:49 +0200] "GET /wp-login.php HTTP/1.1" 301 285 "-" "Mozilla/5.0" "-" host=neiataviaggi.com
174.138.53.106 - - [19/May/2026:03:59:49 +0200] "GET /wp-login.php HTTP/1.1" 404 2259 "-" "Mozilla/5.0" "-" host=neiataviaggi.com
174.138.53.106 - - [19/May/2026:04:30:53 +0200] "GET /wp-login.php HTTP/1.1" 301 283 "-" "Mozilla/5.0" "-" host=johnfante.info
show less
Port Scan
🇫🇷
ELYAZ
2026-05-19 02:26:46
(1 month ago)
(y4) Failed scan -byebye- from 174.138.53.106 (US/United States/-): (CF_ENABLE)
Hacking
🇫🇮
cleverest.eu
2026-05-19 02:22:12
(1 month ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / script_kiddie_detection"}
Web App Attack
🇫🇷
Thaliruth
2026-05-19 02:16:02
(1 month ago)
174.138.53.106 - - [19/May/2026:04:16:02 +0200] "GET /wp-login.php HTTP/1.1" 404 1060 "-" "Mozilla/5 ...
show more
174.138.53.106 - - [19/May/2026:04:16:02 +0200] "GET /wp-login.php HTTP/1.1" 404 1060 "-" "Mozilla/5.0"
...
show less
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-01-16 13:32:51
(5 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 174.138.53.106 (US/United States/-): ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 174.138.53.106 (US/United States/-): 1 in the last 3600 secs (0-195)
show less
Hacking