🇩🇪
maxpower
2026-09-16 16:57:12
(1 hour ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 192.34.58.130 (US/United States/-): 1 in ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 192.34.58.130 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 192.34.58.130 - - [16/Sep/2026:18:57:10 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" host=contora.it
show less
Port Scan
2026-09-16 14:05:48
(4 hours ago)
WordPress Gravity SMTP Plugin Information Disclosure (CVE-2026-4020).
Hacking
🇬🇧
ISPLtd
2026-09-16 12:35:53
(6 hours ago)
192.34.58.130 - - [16/Sep/2026:09:35:38 -0300] "GET /wp-config.php~
192.34.58.130 - - [16/Sep/2026:0 ...
show more
192.34.58.130 - - [16/Sep/2026:09:35:38 -0300] "GET /wp-config.php~
192.34.58.130 - - [16/Sep/2026:09:35:51 -0300] "GET /wp-config.php.save
...
show less
Hacking
Web App Attack
2026-09-16 11:48:04
(6 hours ago)
WEBCONDE WEBEXPLOIT 192.34.58.130 (192.34.58.130)
Web App Attack
🇦🇺
2000cn.com.au
2026-09-16 11:05:41
(7 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-probing
Web App Attack
Hacking
🇳🇱
Alt255
2026-09-16 11:05:33
(7 hours ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 192.34.58.130 - - [16/Sep/2026:13:05:18 +0200] "GET /wp-config.php.save HTTP/1.1" 404 7886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-09-16 09:45:19
(8 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇺🇸
TAY
2026-09-16 09:29:55
(9 hours ago)
192.34.58.130 - - [16/Sep/2026:17:28:36 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54906 "-" "Mozi ...
show more
192.34.58.130 - - [16/Sep/2026:17:28:36 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54906 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
192.34.58.130 - - [16/Sep/2026:17:28:50 +0800] "GET /wp-config.php~ HTTP/1.1" 404 54881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
192.34.58.130 - - [16/Sep/2026:17:28:51 +0800] "GET /wp-config.php.save HTTP/1.1" 404 54885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
192.34.58.130 - - [16/Sep/2026:17:28:54 +0800] "GET /wp-config.php.old HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
192.34.58.130 - - [16/Sep/2026:17:29:29 +0800] "GET /wp-config.php.txt HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l
...
show less
Brute-Force
🇫🇷
masterguru
2026-09-16 08:12:40
(10 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
🇧🇪
taivas.nl
2026-09-16 04:34:20
(14 hours ago)
Many_bad_calls
Web App Attack
🇬🇧
Apache
2026-09-16 03:24:57
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 192.34.58.130 (US/United States/-): 5 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 192.34.58.130 (US/United States/-): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇩🇪
burlacu.org
2026-09-16 00:30:02
(18 hours ago)
Nginx multi-log analysis detected: wordpress_scan. Evidence: WordPress config access with 5 attempts ...
show more
Nginx multi-log analysis detected: wordpress_scan. Evidence: WordPress config access with 5 attempts. Blocked automatically.
show less
Web App Attack
Bad Web Bot
🇮🇳
evicky2002
2026-09-16 00:02:04
(18 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇷🇴
iulianh
2026-09-15 23:34:57
(19 hours ago)
80,443
Brute-Force
SSH
🇩🇪
FeG Deutschland
2026-09-15 22:14:54
(20 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack