Anonymous
2026-10-27 15:50:08
(4 hours ago)
[osotir.org] httpd-suspicious-path: sites=www.drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.l ...
show more
[osotir.org] httpd-suspicious-path: sites=www.drasimas.gr; logs=/var/log/httpd/domains/drasimas.gr.log; samples=//wp-includes/wlwmanifest.xml | //?author=1 | //?author=2
show less
Hacking
Web App Attack
๐ฉ๐ช
maxpower
2026-10-27 15:37:07
(4 hours ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 35.241.231.89 (BE/Belgium/89.231.241.35.bc.goo ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 35.241.231.89 (BE/Belgium/89.231.241.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/27 16:37:03 [error] 240588#240588: *885481 access forbidden by rule, client: 35.241.231.89, server: coiet.it, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "www.coiet.it"
2026/10/27 16:37:04 [error] 240588#240588: *885481 access forbidden by rule, client: 35.241.231.89, server: coiet.it, request: "GET //?author=1 HTTP/2.0", host: "www.coiet.it"
2026/10/27 16:37:04 [error] 240588#240588: *885481 access forbidden by rule, client: 35.241.231.89, server: coiet.it, request: "GET //?author=2 HTTP/2.0", host: "www.coiet.it"
show less
Port Scan
๐บ๐ธ
agenciahypelab.com.br
2026-10-27 15:36:59
(4 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
Anonymous
2026-10-27 15:36:30
(4 hours ago)
[redacted] 35.241.231.89 - - [27/Oct/2026:16:36:27 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 35.241.231.89 - - [27/Oct/2026:16:36:27 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.241.231.89 - - [27/Oct/2026:16:36:27 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.241.231.89 - - [27/Oct/2026:16:36:27 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.241.231.89 - - [27/Oct/2026:16:36:28 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.241.231.89 - - [27/Oct/2026:16:36:28 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Moz
...
show less
Hacking
Web App Attack
๐ฎ๐น
VHosting
2026-10-27 15:35:04
(4 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
abdubhai
2026-10-27 15:32:46
(4 hours ago)
35.241.231.89 - - [27/Oct/2026:2
...
Brute-Force
๐ณ๐ฑ
Alt255
2026-10-27 15:31:16
(4 hours ago)
[cb-15al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[cb-15al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 35.241.231.89 - - [27/Oct/2026:16:31:10 +0100] "POST //xmlrpc.php HTTP/2.0" 403 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
35.241.231.89 - - [27/Oct/2026:16:31:11 +0100] "POST //xmlrpc.php HTTP/2.0" 403 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
35.241.231.89 - - [27/Oct/2026:16:31:11 +0100] "POST //xmlrpc.php HTTP/2.0" 403 32 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
35.241.231.89 - - [27/Oct/2026:16:31:11 +0100] "POST //xmlrpc.php HTTP/2.0" 403 32 "-" "Mozilla/5.0 (
...
show less
Brute-Force
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-27 14:52:28
(5 hours ago)
[27/Oct/2026:16:52:27 +0200] -- 35.241.231.89 Ban reason: User-Agent CMS-Checker
Bad Web Bot
Web App Attack