Anonymous
2026-09-28 14:49:43
(2 hours ago)
(caddyscan) Scanner path probe from 203.175.125.201 (ID/Indonesia/-): 5 in the last 3600 secs; Ports ...
show more
(caddyscan) Scanner path probe from 203.175.125.201 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:14:49:30 +0000] "GET /wp-admin/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:14:49:32 +0000] "GET /wp-admin/css/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:14:49:34 +0000] "GET /wp-admin/images/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:14:49:36 +0000] "GET /wp-admin/includes/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:14:49:38 +0000] "GET /wp-admin/js/ HTTP/1.1"
show less
Port Scan
๐ณ๐ฑ
Site.eu
2026-09-28 12:39:16
(5 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
consul.to
2026-09-28 10:36:12
(7 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-28 10:21:19
(7 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
Anonymous
2026-09-28 08:06:09
(9 hours ago)
(caddyscan) Scanner path probe from 203.175.125.201 (ID/Indonesia/-): 5 in the last 3600 secs; Ports ...
show more
(caddyscan) Scanner path probe from 203.175.125.201 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:08:05:58 +0000] "GET /wp-admin/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:08:06:00 +0000] "GET /wp-admin/css/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:08:06:02 +0000] "GET /wp-admin/images/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:08:06:05 +0000] "GET /wp-admin/includes/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [28/Sep/2026:08:06:07 +0000] "GET /wp-admin/js/ HTTP/1.1"
show less
Port Scan
๐ง๐ท
radardatelecom
2026-09-27 22:26:03
(19 hours ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
Anonymous
2026-09-27 22:10:14
(19 hours ago)
[Mon Sep 28 00:10:10.281286 2026] [authz_core:error] [pid 5942:tid 5994] [client 203.175.125.201:609 ...
show more
[Mon Sep 28 00:10:10.281286 2026] [authz_core:error] [pid 5942:tid 5994] [client 203.175.125.201:60962] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/
[Mon Sep 28 00:10:11.430358 2026] [authz_core:error] [pid 3531:tid 3570] [client 203.175.125.201:61052] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/
[Mon Sep 28 00:10:12.187507 2026] [authz_core:error] [pid 5942:tid 5970] [client 203.175.125.201:60962] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/
[Mon Sep 28 00:10:13.665698 2026] [authz_core:error] [pid 3531:tid 3574] [client 203.175.125.201:61052] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/css/
...
show less
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-09-27 19:10:44
(22 hours ago)
203.175.125.201 - - [27/Sep/2026:19:09:50 +0000] "GET /wp-admin/images/ HTTP/1.1" 403 14294 "-" "Moz ...
show more
203.175.125.201 - - [27/Sep/2026:19:09:50 +0000] "GET /wp-admin/images/ HTTP/1.1" 403 14294 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:19:09:51 +0000] "GET /wp-admin/includes/ HTTP/1.1" 403 14272 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:19:09:53 +0000] "GET /wp-admin/js/ HTTP/1.1" 403 14272 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:19:09:55 +0000] "GET /wp-admin/maint/ HTTP/1.1" 403 14272 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:19:10:09 +0000] "GET /wp-content/languages/ HTTP/1.1" 403 14294 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-27 17:53:58
(23 hours ago)
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 203.175.125.201 - - [27/Sep/2026:19:53:30 +0200] "GET /wp-admin/ HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
203.175.125.201 - - [27/Sep/2026:19:53:30 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
203.175.125.201 - - [27/Sep/2026:19:53:31 +0200] "GET /wp-admin/images/ HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
203.175.125.201 - - [27/Sep/2026:19:53:32 +0200] "GET /wp-admin/includes/ HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
203.175.125.201 - - [27/Sep/2026:19:53:32 +0200] "GET /wp-admin/js/ HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
203.175
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-27 17:17:13
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
๐บ๐ธ
antlac1
2026-09-27 15:44:31
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-09-27 15:44:28
(1 day ago)
203.175.125.201 - - [27/Sep/2026:15:42:47 +0000] "GET /wp-admin/images/ HTTP/1.1" 403 13875 "-" "Moz ...
show more
203.175.125.201 - - [27/Sep/2026:15:42:47 +0000] "GET /wp-admin/images/ HTTP/1.1" 403 13875 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:15:42:51 +0000] "GET /wp-admin/includes/ HTTP/1.1" 403 13875 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:15:42:55 +0000] "GET /wp-admin/js/ HTTP/1.1" 403 13875 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:15:43:00 +0000] "GET /wp-admin/maint/ HTTP/1.1" 403 13875 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
203.175.125.201 - - [27/Sep/2026:15:43:26 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 13875 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)" "-" edge="203.175.125.201"
...
show less
Web App Attack
Anonymous
2026-09-27 13:50:10
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 203.175.125.201 (ID/Indonesia/-)
SQL Injection
Anonymous
2026-09-27 13:36:20
(1 day ago)
[Sun Sep 27 15:36:18.935167 2026] [authz_core:error] [pid 15393] [client 203.175.125.201:64686] AH01 ...
show more
[Sun Sep 27 15:36:18.935167 2026] [authz_core:error] [pid 15393] [client 203.175.125.201:64686] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Sep 27 15:36:19.459805 2026] [authz_core:error] [pid 15393] [client 203.175.125.201:64686] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sun Sep 27 15:36:19.718110 2026] [authz_core:error] [pid 15393] [client 203.175.125.201:64686] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-09-27 13:28:21
(1 day ago)
(caddyscan) Scanner path probe from 203.175.125.201 (ID/Indonesia/-): 5 in the last 3600 secs; Ports ...
show more
(caddyscan) Scanner path probe from 203.175.125.201 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 203.175.125.201 - - [27/Sep/2026:13:28:09 +0000] "GET /wp-admin/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [27/Sep/2026:13:28:11 +0000] "GET /wp-admin/css/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [27/Sep/2026:13:28:14 +0000] "GET /wp-admin/images/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [27/Sep/2026:13:28:16 +0000] "GET /wp-admin/includes/ HTTP/1.1"
[REDACTED] 200 2627 203.175.125.201 - - [27/Sep/2026:13:28:19 +0000] "GET /wp-admin/js/ HTTP/1.1"
show less
Port Scan