Total reports
4 from
4 distinct
reporters
First reported
November 10th 2026
Most recent report
10 hours ago
Last 60 days
Top reporter locations
🇩🇪
Germany
4
Most common categories
Web App Attack
3
Port Scan
2
Brute-Force
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
ghostwarriors
2026-11-11 00:50:43
UTC ·
(10 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
throny
2026-11-11 00:48:13
UTC ·
(10 hours ago)
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 ...
show more
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Sa
Requested, e.g.:
- confluence.[REDACTED]/xmlrpc.php
show less
Web App Attack
🇩🇪
maxpower
2026-11-11 00:02:00
UTC ·
(11 hours ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 190.6.254.87 (AR/Argentina/adsl-190-6-254-87.cooptortu.com.ar): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 190.6.254.87 - - [11/Nov/2026:01:01:47 +0100] ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 190.6.254.87 (AR/Argentina/adsl-190-6-254-87.cooptortu.com.ar): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 190.6.254.87 - - [11/Nov/2026:01:01:47 +0100] "GET /?author=1&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=colleflorido.it
190.6.254.87 - - [11/Nov/2026:01:01:50 +0100] "GET /?author=2&feed=rss2 HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" host=colleflorido.it
2026/11/11 01:01:53 [error] 2380806#2380806: *2699793 access forbidden by rule, client: 190.6.254.87, server: colleflorido.it, request: "GET /?author=3&feed=rss2 HTTP/2.0", host: "colleflorido.it"
show less
Port Scan
🇩🇪
LRob
2026-11-10 13:58:47
UTC ·
(21 hours ago)
Wordlist path sweep | method: GET | path: /wp-json/buddypress/v1/members, /wp-json/buddyboss/v1/members, /wp-json/authorsy/v1/authors (+3 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Sa ...
show more
Wordlist path sweep | method: GET | path: /wp-json/buddypress/v1/members, /wp-json/buddyboss/v1/members, /wp-json/authorsy/v1/authors (+3 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Port Scan
Web App Attack
