🇫🇷
dynamix
2026-07-08 02:32:08
(2 days ago)
Multiple WAF Violations
Web App Attack
2026-07-07 05:06:12
(3 days ago)
Trying to access config files
Web App Attack
🇬🇧
consul.to
2026-06-22 22:36:03
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇯🇵
demonsword
2026-06-01 08:43:11
(1 month ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: account.jetbrains.com:443
show less
Open Proxy
Port Scan
🇫🇮
Shaik Sai Meera
2026-05-14 22:05:08
(1 month ago)
IM360 WAF: WordPress plugins/themes version enumeration
Brute-Force
FTP Brute-Force
Open Proxy
🇺🇸
integrantservices.com
2026-04-24 08:14:06
(2 months ago)
(PERMBLOCK) 203.159.81.55 (IL/Israel/-) has had more than 4 temp blocks
Hacking
🇺🇸
integrantservices.com
2026-04-24 07:11:25
(2 months ago)
(wordpress) Failed wordpress login from 203.159.81.55 (IL/Israel/-)
Brute-Force
2026-03-02 14:40:39
(4 months ago)
ALFA.TEaM.Web.Shell
Web App Attack
2026-02-23 22:41:22
(4 months ago)
[redacted] 203.159.81.55 - - [23/Feb/2026:23:41:17 +0100] "GET /wp-admin/network/ HTTP/1.1" 404 236 ...
show more
[redacted] 203.159.81.55 - - [23/Feb/2026:23:41:17 +0100] "GET /wp-admin/network/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
[redacted] 203.159.81.55 - - [23/Feb/2026:23:41:17 +0100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
[redacted] 203.159.81.55 - - [23/Feb/2026:23:41:18 +0100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
[redacted] 203.159.81.55 - - [23/Feb/2026:23:41:19 +0100] "GET /wp-admin/js/dist/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
[redacted] 203.159.81.55 - - [23/Feb/2026:23:41:20 +0100] "GET /wp-admin/js/widgets/ HTTP/1.1
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 16:54:46
(4 months ago)
(mod_security) mod_security (id:240000) triggered by 203.159.81.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 203.159.81.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 11:53:57.454663 2026] [security2:error] [pid 31411:tid 31411] [client 203.159.81.55:49511] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||somewierdness.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "somewierdness.com"] [uri "/images/stories/themes.php"] [unique_id "aZs0pY_zoaLZT_2g3MtLkAAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-02-22 13:48:56
(4 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-22 12:32:01
(4 months ago)
(mod_security) mod_security (id:240000) triggered by 203.159.81.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 203.159.81.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 22 07:31:54.413382 2026] [security2:error] [pid 12127:tid 12127] [client 203.159.81.55:26019] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||kithouse.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "kithouse.org"] [uri "/images/stories/themes.php"] [unique_id "aZr3OrZ7-gqF_WB6SE3_zAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-02-22 11:22:22
(4 months ago)
203.159.81.55 - - [22/Feb/2026:13:22:22 +0200] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 404 282 ...
show more
203.159.81.55 - - [22/Feb/2026:13:22:22 +0200] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 404 282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
203.159.81.55 - - [22/Feb/2026:13:22:22 +0200] "GET /wp-includes/l10n/ HTTP/1.1" 404 282 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0"
...
show less
Web App Attack
🇨🇦
Mediashaker
2026-02-09 18:39:15
(5 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 203.159.81.55 (IL/Israel ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 203.159.81.55 (IL/Israel/-)
show less
Port Scan
🇦🇺
nzhost.co.nz
2026-02-09 11:53:14
(5 months ago)
$f2bV_matches
Hacking
Brute-Force