🇮🇪
AutosOnShow
2026-10-16 15:50:17
(4 hours ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-16 15:49:18.804 |
Web App Attack
🇮🇪
AutosOnShow
2026-10-15 22:10:17
(22 hours ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-15 22:09:58.344 |
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 17:30:58
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 195.63.19.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.19.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 13:30:53.273447 2026] [security2:error] [pid 26246:tid 26246] [client 195.63.19.239:15618] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.yuichiro.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.yuichiro.us"] [uri "/wp-login.php"] [unique_id "as5qzX6dzbyaDIvR6bkE6QAAAAI"], referer: http://yuichiro.us/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-09-06 02:00:53
(1 month ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits.
show less
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-08-25 02:08:56
(1 month ago)
cloudlinux2 fail2ban: 2026-08-25 04:04:30,480 fail2ban.filter [1464]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-25 04:04:30,480 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.6.69 - 2026-08-25 04:04:30cloudlinux2 fail2ban: 2026-08-25 04:04:31,909 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.10.90 - 2026-08-25 04:04:31cloudlinux2 fail2ban: 2026-08-25 04:04:29,175 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 217.181.83.195 - 2026-08-25 04:04:29cloudlinux2 fail2ban: 2026-08-25 04:04:32,656 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.30.81 - 2026-08-25 04:04:32cloudlinux2 fail2ban: 2026-08-25 04:04:35,034 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.11.161 - 2026-08-25 04:04:34cloudlinux2 fail2ban: 2026-08-25 04:04:33,430 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.19.239 - 2026-08-25 04:04:33cloudlinux2 fail2ban: 2026-08-25 04:06:16,183 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Unban 97.97.236.74cloudlinux2 fail2ban: 2026-08-2
show less
Web App Attack
🇲🇽
octageeks.com
2026-08-17 04:09:29
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇮🇩
bps-statistics
2026-06-17 22:30:22
(3 months ago)
WP Login Scan Activities: "2026-06-18T05:30:22.072+07:00" "/wp-login.php" "195.63.19.239" "Mozilla/5 ...
show more
WP Login Scan Activities: "2026-06-18T05:30:22.072+07:00" "/wp-login.php" "195.63.19.239" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
show less
Web App Attack
🇫🇷
Tilellit.PRO
2026-05-29 13:51:16
(4 months ago)
Fail2Ban banned 195.63.19.239 for security violations in jail wp-armour. Log: 2026/05/29 13:51:15 [e ...
show more
Fail2Ban banned 195.63.19.239 for security violations in jail wp-armour. Log: 2026/05/29 13:51:15 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 195.63.19.239 | Target: wplogin" , client: 195.63.19.239, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇨🇭
backslash
2026-05-23 05:21:01
(4 months ago)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-13 07:56:22
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.19.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.19.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 13 03:56:17.383833 2026] [security2:error] [pid 8865:tid 8865] [client 195.63.19.239:39310] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.staben.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.staben.com"] [uri "/wp-login.php"] [unique_id "abPDIXWqW-ejDWDaE0cljQAAAAQ"], referer: https://www.staben.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 11:07:16
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 195.63.19.239 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 195.63.19.239 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 07:07:12.343500 2026] [security2:error] [pid 26522:tid 26522] [client 195.63.19.239:37948] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.centrodentalsindolor.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.centrodentalsindolor.com"] [uri "/wp-login.php"] [unique_id "abFM4CIJSoYKFy43woeGzgAAAAo"], referer: https://centrodentalsindolor.com/wp-login.php
show less
Brute-Force
Bad Web Bot
Web App Attack