🇩🇪
LRob
2025-03-04 23:06:06
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
2025-03-03 08:17:55
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
akcurate.de
2025-03-03 05:37:37
(1 year ago)
[Mon Mar 03 06:37:36.202251 2025] [authz_core:error] [pid 1120886:tid 1121036] [client 176.9.63.219: ...
show more
[Mon Mar 03 06:37:36.202251 2025] [authz_core:error] [pid 1120886:tid 1121036] [client 176.9.63.219:41362] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
🇩🇪
akcurate.de
2025-03-03 04:42:04
(1 year ago)
[Mon Mar 03 05:30:35.121892 2025] [authz_core:error] [pid 1121086:tid 1121138] [client 176.9.63.219: ...
show more
[Mon Mar 03 05:30:35.121892 2025] [authz_core:error] [pid 1121086:tid 1121138] [client 176.9.63.219:56256] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Mar 03 05:42:03.077481 2025] [authz_core:error] [pid 1121086:tid 1121114] [client 176.9.63.219:47178] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-03 04:16:53
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 176.9.63.219 (maxwell.virtualbit.it): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 176.9.63.219 (maxwell.virtualbit.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 02 23:16:47.113113 2025] [security2:error] [pid 1642:tid 1642] [client 176.9.63.219:42554] [client 176.9.63.219] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kerrywoodandson.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrywoodandson.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Z8UtL6v4opDKOZutIo1vyQAAAAg"], referer: https://kerrywoodandson.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
KIsmay
2025-03-03 03:11:08
(1 year ago)
Mar 2 19:54:27 www4 WPAudit[180406]: 176.9.63.219 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
Mar 2 19:54:27 www4 WPAudit[180406]: 176.9.63.219 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" vhsport:vhsport2023 FAIL
Mar 2 21:15:27 www4 WPAudit[186553]: 176.9.63.219 vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" vhsport:Vhsport_2020 FAIL
Mar 2 21:32:04 www4 WPAudit[188787]: 176.9.63.219 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" gifp:gifp888 FAIL
Mar 2 22:08:49 www4 WPAudit[193671]: 176.9.63.219 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" gifp:goldislandforestproducts@123 FAIL
Mar 2 22:11:07 www4 WPAudit[194478]: 176.9.63.219 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
...
show less
Brute-Force
Web App Attack
🇩🇪
akcurate.de
2025-03-03 02:20:44
(1 year ago)
[Mon Mar 03 03:19:50.574035 2025] [authz_core:error] [pid 1120885:tid 1120972] [client 176.9.63.219: ...
show more
[Mon Mar 03 03:19:50.574035 2025] [authz_core:error] [pid 1120885:tid 1120972] [client 176.9.63.219:47542] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Mar 03 03:20:43.671736 2025] [authz_core:error] [pid 1120886:tid 1121041] [client 176.9.63.219:46348] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Mar 03 03:20:43.671736 2025] [authz_core:error] [pid 1120886:tid 1121041] [client 176.9.63.219:46348] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
🇩🇪
akcurate.de
2025-03-03 01:48:43
(1 year ago)
[Mon Mar 03 01:24:40.665632 2025] [authz_core:error] [pid 1121086:tid 1121127] [client 176.9.63.219: ...
show more
[Mon Mar 03 01:24:40.665632 2025] [authz_core:error] [pid 1121086:tid 1121127] [client 176.9.63.219:36980] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Mar 03 01:25:42.414247 2025] [authz_core:error] [pid 1121086:tid 1121127] [client 176.9.63.219:46208] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Mar 03 01:26:51.828094 2025] [authz_core:error] [pid 1120886:tid 1121026] [client 176.9.63.219:44008] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
[Mon Mar 03 02:48:41.962435 2025] [authz_core:error] [pid 1121086:tid 1121128] [client 176.9.63.219:50772] AH01630: client denied by server configuration: /var/www/wordp/wp-login.php
...
show less
Brute-Force
Web App Attack
🇫🇷
danirod
2025-03-02 23:47:49
(1 year ago)
(WordPress / Loginizer) Automated login attempt to /wp-login.php
Brute-Force
Web App Attack
🇫🇷
danirod
2025-03-02 23:47:49
(1 year ago)
(WordPress / Loginizer) Automated login attempt to /wp-login.php
Brute-Force
Web App Attack
🇩🇪
LRob
2025-03-02 23:13:32
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇨🇿
ddw
2025-03-02 23:07:08
(1 year ago)
WordPress Brute Force Attack.
Hacking
Brute-Force
Web App Attack
🇩🇪
twx
2025-03-02 23:01:46
(1 year ago)
fail2ban/176.9.63.219 - - [02/Mar/2025:23:49:31 +0100] "POST /wp-login.php HTTP/1.0" 200 4883 "https ...
show more
fail2ban/176.9.63.219 - - [02/Mar/2025:23:49:31 +0100] "POST /wp-login.php HTTP/1.0" 200 4883 "https://blog.enricohomann.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
176.9.63.219 - - [02/Mar/2025:23:54:48 +0100] "POST /wp-login.php HTTP/1.0" 200 4883 "https://blog.enricohomann.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
176.9.63.219 - - [03/Mar/2025:00:01:45 +0100] "POST /wp-login.php HTTP/1.0" 200 4883 "https://blog.enricohomann.de/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
2025-03-02 21:35:03
(1 year ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇬🇧
Spidrweb.co.uk
2025-03-02 21:00:29
(1 year ago)
Brute-Force WordPress attack
Web App Attack