|
🇫🇷
Yepngo
|
|
178.239.198.98 - - [03/Nov/2026:18:33:32 +0100] "POST /wp-login.php HTTP/2.0" 200 12508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
...
|
Brute-Force
Web App Attack
|
|
🇨🇦
KIsmay
|
|
2026-11-03T08:36:38.584203-04:00 www4 WPAudit[1575585]: 178.239.198.98 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" SBD:https://katharinedickerson.com FAIL
2026-11-03T08:43:11.84 ...
show more
2026-11-03T08:36:38.584203-04:00 www4 WPAudit[1575585]: 178.239.198.98 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" SBD:https://katharinedickerson.com FAIL
2026-11-03T08:43:11.849446-04:00 www4 WPAudit[1576059]: 178.239.198.98 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" sbd-admin:https://goldislandforestproducts.ca FAIL
2026-11-03T08:43:11.857432-04:00 www4 WPAudit[1576033]: 178.239.198.98 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" gifp:https://goldislandforestproducts.ca FAIL
2026-11-03T09:41:15.802053-04:00 www4 WPAudit[1579992]: 178.239.198.98 katharinedickerson.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" katharined:katharined1234 FAIL
2026-11-03T10:07:04.638488-04:00 www4 WPAudit[1581697]: 178.239.198.98
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
KIsmay
|
|
2026-11-02T21:38:08.580573-04:00 www4 WPAudit[1530291]: 178.239.198.98 hvrhaulers.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" hvr:hvr2025 FAIL
2026-11-02T22:23:52.848493-04:00 www4 WPAudit[1 ...
show more
2026-11-02T21:38:08.580573-04:00 www4 WPAudit[1530291]: 178.239.198.98 hvrhaulers.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" hvr:hvr2025 FAIL
2026-11-02T22:23:52.848493-04:00 www4 WPAudit[1533303]: 178.239.198.98 cottonwoodc.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" Elyena:Elyena123 FAIL
2026-11-02T23:12:22.557816-04:00 www4 WPAudit[1536590]: 178.239.198.98 katharinedickerson.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" SBD:pass FAIL
2026-11-03T01:59:14.338544-04:00 www4 WPAudit[1547606]: 178.239.198.98 bcadjuster.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" doug:user%02 FAIL
2026-11-03T02:26:38.913358-04:00 www4 WPAudit[1549514]: 178.239.198.98 nelsonbcwelding.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/60
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
Yepngo
|
|
178.239.198.98 - - [03/Nov/2026:07:19:31 +0100] "POST /wp-login.php HTTP/2.0" 200 12508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
...
|
Brute-Force
Web App Attack
|
|
🇫🇷
Yepngo
|
|
178.239.198.98 - - [03/Nov/2026:03:56:04 +0100] "POST /wp-login.php HTTP/2.0" 200 12506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
178.239.198.98 - - [03/Nov/2026:04:27:00 +0100] "POST /wp-login. ...
show more
178.239.198.98 - - [03/Nov/2026:03:56:04 +0100] "POST /wp-login.php HTTP/2.0" 200 12506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
178.239.198.98 - - [03/Nov/2026:04:27:00 +0100] "POST /wp-login.php HTTP/2.0" 200 12504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack
Bad Web Bot
|
|
Anonymous
|
|
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack
Bad Web Bot
|
|
Anonymous
|
|
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack
Bad Web Bot
|
|
🇺🇸
EmilGH
|
|
178.239.198.98 - - [29/Oct/2026:06:57:39 +0000] "GET /wp-includes/blocks/config.php HTTP/1.1" 404 4528 "http://restaurantbusinessconsulting.com/wp-includes/blocks/config.php" "Go-http-client/1.1"
178.239.198.98 - - [29/Oct/2026:06:57:40 +0000] "GET / ...
show more
178.239.198.98 - - [29/Oct/2026:06:57:39 +0000] "GET /wp-includes/blocks/config.php HTTP/1.1" 404 4528 "http://restaurantbusinessconsulting.com/wp-includes/blocks/config.php" "Go-http-client/1.1"
178.239.198.98 - - [29/Oct/2026:06:57:40 +0000] "GET /wp-includes/wp-load.php HTTP/1.1" 404 518 "http://restaurantbusinessconsulting.com/wp-includes/wp-load.php" "Go-http-client/1.1"
178.239.198.98 - - [29/Oct/2026:06:57:40 +0000] "GET /wp-includes/login.php HTTP/1.1" 404 518 "http://restaurantbusinessconsulting.com/wp-includes/login.php" "Go-http-client/1.1"
178.239.198.98 - - [29/Oct/2026:06:57:41 +0000] "GET /wp-includes/config.php HTTP/1.1" 404 518 "http://restaurantbusinessconsulting.com/wp-includes/config.php" "Go-http-client/1.1"
178.239.198.98 - - [29/Oct/2026:06:57:41 +0000] "GET /wp-content/w3tc-config/index.php HTTP/1.1" 404 518 "http://restaurantbusinessconsulting.com/wp-content/w3tc-config/index.php" "Go-http-client/1.1"
178.239.198.98 - - [29/Oct/2026:06:57:41 +0000] "GET /wp-con
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇪
SkyDancer
|
|
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
|
Hacking
Brute-Force
SSH
|
|
🇹🇷
Jova
|
|
Web server path scanning: 15 nonexistent paths requested within a minute.
|
Web App Attack
|
|
🇮🇳
dineshskt4all
|
|
[Sat Oct 24 07:31:19.022207 2026] [proxy_fcgi:error] [pid 2627258:tid 124208440866496] [client 178.239.198.98:0] AH01071: Got error 'Primary script unknown', referer: http://kalboot.com/000.php
...
|
Brute-Force
|
|
Anonymous
|
|
[osotir.org] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/protected/.env | fast_lane=true kernel_at=2026-10-23T14:27:09+00:00 | requests=1
|
Hacking
Web App Attack
|
|
🇦🇺
dyln
|
|
Dyls honeypot brute-force: proto8 (1 total hits)
|
Brute-Force
|
|
🇺🇸
HamSammich
|
|
Automated sensor: 1 SSH connection/probe attempts over the last 24h (latest 2026-09-07T02:14Z).
|
Brute-Force
SSH
|