|
๐จ๐ญ
backslash
|
|
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
|
Bad Web Bot
|
|
|
๐ฒ๐ฝ
octageeks.com
|
|
Wordpress malicious attack:[octaflood]
|
Web App Attack
|
|
|
๐ฎ๐น
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-07-20 08:28:42,576 fail2ban.filter [1927]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-20 08:28:42,576 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 45.3.44.52 - 2026-07-20 08:28:41cloudlinux2 fail2ban: 2026-07-20 08:28:43,347 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 45.3.44.55 - 2026-07-20 08:28:42cloudlinux2 fail2ban: 2026-07-20 08:28:53,120 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 65.111.26.228 - 2026-07-20 08:28:52cloudlinux2 fail2ban: 2026-07-20 08:29:03,119 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 65.111.26.242 - 2026-07-20 08:29:02cloudlinux2 fail2ban: 2026-07-20 08:29:14,140 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 129.222.187.151 - 2026-07-20 08:29:14cloudlinux2 fail2ban: 2026-07-20 08:29:21,841 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 45.3.44.186 - 2026-07-20 08:29:21cloudlinux2 fail2ban: 2026-07-20 08:29:27,721 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 1.38.93.191 - 2026-07-20 08:29:27cloudlinux2 f
show less
|
Web App Attack
|
|
|
๐บ๐ธ
omc
|
|
AH01797: Unauthorized file
|
Bad Web Bot
|
|
|
๐ฒ๐ฝ
octageeks.com
|
|
Wordpress malicious attack:[octaflood]
|
Web App Attack
|
|
|
๐ฉ๐ช
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
|
Exploited Host
Web App Attack
|
|
|
๐ฎ๐น
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-07-15 05:34:56,077 fail2ban.filter [1812]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-15 05:34:56,077 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.132.227.45 - 2026-07-15 05:34:55cloudlinux2 fail2ban: 2026-07-15 05:34:55,579 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.132.227.47 - 2026-07-15 05:34:55cloudlinux2 fail2ban: 2026-07-15 05:35:10,426 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.3.44.165 - 2026-07-15 05:35:09cloudlinux2 fail2ban: 2026-07-15 05:35:09,325 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.3.44.164 - 2026-07-15 05:35:08cloudlinux2 fail2ban: 2026-07-15 05:35:11,532 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.3.44.109 - 2026-07-15 05:35:10cloudlinux2 fail2ban: 2026-07-15 05:35:30,782 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.8.19.2 - 2026-07-15 05:35:28cloudlinux2 fail2ban: 2026-07-15 05:35:30,905 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.92.229.78 - 2026-07-15 05:35:28cloudlinux2 fail2ban
show less
|
Web App Attack
|
|
|
๐ฎ๐น
Progetto1
|
|
Website Scanning / Scraping
|
Bad Web Bot
Exploited Host
Web App Attack
|
|
|
๐บ๐ธ
IndigoRidge
|
|
45.3.44.109 - - [11/Jul/2026:19:50:23 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyder ...
show more
45.3.44.109 - - [11/Jul/2026:19:50:23 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:24 -0400] "POST /wp-login.php HTTP/1.0" 200 12530 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:25 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:26 -0400] "POST /wp-login.php HTTP/1.0" 200 12530 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
45.3.44.109 - - [11/Jul/2026:19:50:27 -0400] "POST /wp-login.php HTTP/1.0" 200 12514 "https://clyderealty.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:13
...
show less
|
Web App Attack
|
|
|
๐บ๐ธ
cwytech
|
|
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wp-us-login-only-high.
|
Bad Web Bot
Web App Attack
|
|
|
๐ซ๐ท
tecnicorioja
|
|
wp-login attack [29/Jun/2026:07:28:13
|
Brute-Force
Web App Attack
|
|
|
Anonymous
|
|
Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.
|
Web App Attack
|
|
|
๐ฌ๐ท
setupgr
|
|
(mod_security) mod_security (id:900001) triggered by 45.3.44.109 (ES/Spain/Madrid/Madrid/-/[AS200373 ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.44.109 (ES/Spain/Madrid/Madrid/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 07:54:26.932672 2026] [security2:error] [pid 357904:tid 357949] [client 45.3.44.109:28531] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.babis.photo"] [severity "CRITICAL"] [tag "security"] [hostname "mail.babis.photo"] [uri "/wp-login.php"] [unique_id "ajy0gko5pHjF0H7EeFM-6wAAAEM"], referer: https://mail.babis.photo/wp-login.php
show less
|
Port Scan
|
|
|
๐บ๐ธ
omc
|
|
AH01797: Unauthorized file
|
Bad Web Bot
|
|
|
๐ซ๐ท
ELYAZ
|
|
(y4) Failed scan -byebye- from 45.3.44.109 (ES/Spain/-): (CF_ENABLE)
|
Hacking
|
|