๐ฆ๐น
joe-abuse
2026-10-04 01:36:29
(18 hours ago)
Automated report from fail2ban on www.fitzgerald.eu. Jail: apache-badpaths. First seen: 2026-10-02 2 ...
show more
Automated report from fail2ban on www.fitzgerald.eu. Jail: apache-badpaths. First seen: 2026-10-02 20:00:17. Events: 1. Reported by ipdb-security/fitzgerald.eu
show less
Web App Attack
๐ฉ๐ช
Prepaid-Host.com
2026-10-02 20:09:05
(1 day ago)
Web Exploit: 1 event(s), last 2026-10-02 20:09 UTC
41.248.202.148 - - [02/Oct/2026:22:08:56 +0200] " ...
show more
Web Exploit: 1 event(s), last 2026-10-02 20:09 UTC
41.248.202.148 - - [02/Oct/2026:22:08:56 +0200] "POST //wp-login.php HTTP/1.1" 200 17281 "https://[site]//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:22:08:56 +0200] "POST //wp-login.php HTTP/1.1" 200 17281 "https://[site]//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:21:23:40 +0200] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safa
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-10-02 20:05:09
(1 day ago)
Probing websites for vulnerabilities
Web App Attack
๐ฉ๐ช
palzer.IT
2026-10-02 20:03:35
(1 day ago)
Fail2ban automatic report for plesk-wordpress: 41.248.202.148 - - [02/Oct/2026:22:03:02 +0200] POST ...
show more
Fail2ban automatic report for plesk-wordpress: 41.248.202.148 - - [02/Oct/2026:22:03:02 +0200] POST //wp-login.php [DOMAIN_REMOVED] 200 65620 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 41.248.202.148 - - [02/Oct/2026:22:03:04 +0200] POST //wp-login.php [DOMAIN_REMOVED] 200 65620 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36 41.248.202.148 - - [02/Oct/2026:22:03:05 +0200] POST //wp-login.php [DOMAIN_REMOVED] 200 65620 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-02 19:59:15
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ซ๐ฎ
JLKnoch Software GmbH
2026-10-02 19:55:09
(1 day ago)
CrowdSec crowdsecurity/http-probing
Brute-Force
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-10-02 19:46:04
(2 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
DocNetzwerk
2026-10-02 19:36:47
(2 days ago)
(wordpress) Failed wordpress login from 41.248.202.148 (MA/Morocco/-)
Brute-Force
๐ฉ๐ช
filstal.org
2026-10-02 19:30:43
(2 days ago)
WordPress login brute-force detected.
Brute-Force
Web App Attack
๐ณ๐ฑ
maxxsense
2026-10-02 19:22:21
(2 days ago)
(wordpress) Failed wordpress login from 41.248.202.148 (MA/Morocco/-)
Brute-Force
Anonymous
2026-10-02 19:07:23
(2 days ago)
Bad Web Bot
Anonymous
2026-10-02 19:06:26
(2 days ago)
[redacted] 41.248.202.148 - - [02/Oct/2026:21:06:17 +0200] "POST //xmlrpc.php HTTP/1.1" 403 239 "-" ...
show more
[redacted] 41.248.202.148 - - [02/Oct/2026:21:06:17 +0200] "POST //xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
[redacted] 41.248.202.148 - - [02/Oct/2026:21:06:17 +0200] "POST //xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
[redacted] 41.248.202.148 - - [02/Oct/2026:21:06:17 +0200] "POST //xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
[redacted] 41.248.202.148 - - [02/Oct/2026:21:06:26 +0200] "POST //xmlrpc.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
[redacted] 41.248.202.148 - - [02/Oct/2026:21:06:26 +0200] "POST
...
show less
Hacking
Web App Attack
๐ซ๐ฎ
Rexikon
2026-10-01 23:24:28
(2 days ago)
41.248.202.148 - - [02/Oct/2026:01:24:22 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://we ...
show more
41.248.202.148 - - [02/Oct/2026:01:24:22 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:01:24:24 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:01:24:25 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:01:24:26 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2
...
show less
Brute-Force
๐ซ๐ฎ
Rexikon
2026-10-01 23:03:44
(2 days ago)
41.248.202.148 - - [02/Oct/2026:01:03:38 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://we ...
show more
41.248.202.148 - - [02/Oct/2026:01:03:38 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:01:03:39 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:01:03:40 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2026:01:03:41 +0200] "POST //wp-login.php HTTP/1.1" 200 17239 "https://weld-gas.pl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
41.248.202.148 - - [02/Oct/2
...
show less
Brute-Force
Anonymous
2026-10-01 23:02:08
(2 days ago)
Detected by CrowdSec: crowdsecurity/http-probing
Web App Attack