🇬🇷
setupgr
2026-06-23 23:30:20
(6 hours ago)
(mod_security) mod_security (id:1000001) triggered by 203.25.124.129 (JP/Japan/Osaka/Osaka/-/[AS1374 ...
show more
(mod_security) mod_security (id:1000001) triggered by 203.25.124.129 (JP/Japan/Osaka/Osaka/-/[AS137409 GSLNETWORKS-AS-AP GSL Networks Pty LTD]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 24 02:30:20.100589 2026] [security2:error] [pid 2455:tid 2568] [client 203.25.124.129:32283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/wp-load.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "93"] [id "1000001"] [msg "Bad file blocked: /wp-content/plugins/wp-file-manager/lib/themes/wp-load.php"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/wp-content/plugins/wp-file-manager/lib/themes/wp-load.php"] [unique_id "ajsXDOuoNgD1zFMGh7Qe9QAAAQc"]
show less
Port Scan
🇪🇸
masterguru
2026-06-22 10:18:13
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
🇳🇱
tmiland
2026-06-22 06:01:33
(2 days ago)
(wordpress_404) WordPress Plugins Honeypot Trap 203.25.124.129 (JP/Japan/-): 2 in the last 3600 secs ...
show more
(wordpress_404) WordPress Plugins Honeypot Trap 203.25.124.129 (JP/Japan/-): 2 in the last 3600 secs; IP: 203.25.124.129; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 203.25.124.129 - - [22/Jun/2026:08:01:24 +0200] "GET /wp-content/plugins/elementor/assets/js/wp-good.php HTTP/1.1" 404 2992 "http://www.*.*/wp-content/plugins/elementor/assets/js/wp-good.php" "Go-http-client/1.1" 203.25.124.129 - - [22/Jun/2026:08:01:29 +0200] "GET /wp-content/plugins/init.php HTTP/1.1" 404 2992 "http://www.*.*/wp-content/plugins/init.php" "Go-http-client/1.1"
show less
Brute-Force
🇩🇪
FeG Deutschland
2026-06-21 20:50:25
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
🇳🇱
middelkoopcc
2026-06-21 12:05:05
(2 days ago)
2026-06-21 14:00:59 [remote 203.25.124.129:58367] AH01276: Cannot serve directory /<redacted>/wp-adm ...
show more
2026-06-21 14:00:59 [remote 203.25.124.129:58367] AH01276: Cannot serve directory /<redacted>/wp-admin/css/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-06-21 14:01:04 [remote 203.25.124.129:58367] AH01276: Cannot serve directory /<redacted>/wp-content/uploads/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 2026-06-21 14:01:14 [remote 203.25.124.129:58367] AH01276: Cannot serve directory /<redacted>/wp-admin/js/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: <redacted> && 60 more within 20 minutes
show less
Web App Attack
2026-06-21 04:18:36
(3 days ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
ghostwarriors
2026-06-20 20:50:19
(3 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jasperedv.de
2026-06-20 15:52:13
(3 days ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
🇦🇺
paulshipley.com.au
2026-06-19 21:48:51
(4 days ago)
shotbysuzanne.com.au:443 203.25.124.129 - - [20/Jun/2026:07:48:49 +1000] "GET /wordpress/wp-admin/ma ...
show more
shotbysuzanne.com.au:443 203.25.124.129 - - [20/Jun/2026:07:48:49 +1000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 404 54263 "http://shotbysuzanne.com.au/wordpress/wp-admin/maint/" "Go-http-client/1.1"
...
show less
Web App Attack
🇩🇪
rh24
2026-06-19 20:41:41
(4 days ago)
203.25.124.129 (JP/Japan/-), more than 25 Apache 403 hits
Hacking
🇬🇧
consul.to
2026-06-19 18:04:59
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
LRob.fr
2026-06-19 07:15:07
(4 days ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
2026-06-18 19:35:15
(5 days ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇺🇸
masterguru
2026-06-18 14:00:17
(5 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-147)
show less
Bad Web Bot
🇧🇷
SOC PR
2026-06-18 05:11:59
(6 days ago)
IPS: Multiple login.php. Possible brute-force attempt.
Web App Attack