๐ณ๐ฑ
Site.eu
2026-10-18 08:01:32
(49 minutes ago)
Excessive 404/403 errors
Brute-Force
๐ฎ๐น
CoreTech srl
2026-10-17 23:08:57
(9 hours ago)
cloudlinux2 fail2ban: 2026-10-18 01:04:36,872 fail2ban.filter [1597]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-10-18 01:04:36,872 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 83.43.106.150 - 2026-10-18 01:04:36cloudlinux2 fail2ban: 2026-10-18 01:05:50,014 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Ban 34.163.172.243cloudlinux2 fail2ban: 2026-10-18 01:05:47,743 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.163.172.243 - 2026-10-18 01:05:47cloudlinux2 fail2ban: 2026-10-18 01:05:49,976 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.163.172.243 - 2026-10-18 01:05:49cloudlinux2 fail2ban: 2026-10-18 01:05:49,896 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.163.172.243 - 2026-10-18 01:05:49cloudlinux2 fail2ban: 2026-10-18 01:05:49,861 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 34.163.172.243 - 2026-10-18 01:05:49cloudlinux2 fail2ban: 2026-10-18 01:05:50,016 fail2ban.filter [1597]: INFO [recidive] Found 34.163.172.243 - 2026-10-18 01:05:50cloudlinux2 fail2ban: 20
show less
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-10-17 09:40:51
(23 hours ago)
csagent: score 19.9: webshell name x2; 1 domain(s) in 4s
Web App Attack
Anonymous
2026-10-16 05:29:47
(2 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐จ๐ญ
zynex
2026-10-15 05:27:01
(3 days ago)
URL Probing: /webdb.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 03:46:45
(4 days ago)
(mod_security) mod_security (id:240000) triggered by 45.132.227.174 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 45.132.227.174 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 23:46:40.694138 2026] [security2:error] [pid 3585:tid 3585] [client 45.132.227.174:35137] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||tour.philipma.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "tour.philipma.com"] [uri "/images/stories/themes.php"] [unique_id "as77IAT5doizMtUoyqipdQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-13 23:47:56
(4 days ago)
[redacted] 45.132.227.174 - - [14/Oct/2026:00:47:53 +0100] "GET /[redacted] HTTP/1.1" 302 6773 0/470 ...
show more
[redacted] 45.132.227.174 - - [14/Oct/2026:00:47:53 +0100] "GET /[redacted] HTTP/1.1" 302 6773 0/47053 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" 443 [redacted] 45.132.227.174 - - [14/Oct/2026:00:47:55 +0100] "GET /wp-admin/ HTTP/1.1" 301 612 0/388 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" 443
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
tecnicorioja
2026-09-14 22:00:46
(1 month ago)
wp-login attack [14/Sep/2026:19:15:51
Brute-Force
Web App Attack
๐บ๐ธ
lostswordfish.com
2026-09-14 12:34:03
(1 month ago)
Wordfence waf block on parsol
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-09-14 12:26:20
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-09-13 00:24:59
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-09-10 23:59:08
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-09-06 00:19:45
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-09-04 21:40:48
(1 month ago)
CMS/framework probe: 45.132.227.174 - - [04/Sep/2026:23:40:48 +0200] "GET /wp-login.php HTTP/1.1" 40 ...
show more
CMS/framework probe: 45.132.227.174 - - [04/Sep/2026:23:40:48 +0200] "GET /wp-login.php HTTP/1.1" 404 162 "-" "Mozilla/5.0" asn=206092 org="F.N.S. HOLDINGS LIMITED" country=US
...
show less
Web App Attack
๐ฉ๐ช
gadix
2026-09-04 06:41:21
(1 month ago)
45.132.227.174 - - [04/Sep/2026:06:57:15 +0200] "POST /wp-login.php HTTP/1.1" 200 44792 "-" "Mozilla ...
show more
45.132.227.174 - - [04/Sep/2026:06:57:15 +0200] "POST /wp-login.php HTTP/1.1" 200 44792 "-" "Mozilla/5.0"
45.132.227.174 - - [04/Sep/2026:07:27:52 +0200] "POST /wp-login.php HTTP/1.1" 200 44792 "-" "Mozilla/5.0"
45.132.227.174 - - [04/Sep/2026:08:41:20 +0200] "POST /wp-login.php HTTP/1.1" 200 44787 "-" "Mozilla/5.0"
...
show less
Web App Attack