🇺🇸
chronos
2026-09-05 02:07:57
(11 minutes ago)
[AUTORAVALT][[04/09/2026 - 23:07:56 -03:00 UTC]
Attack from [Amazon.com, Inc.]
[63.179.93.137][ec2-6 ...
show more
[AUTORAVALT][[04/09/2026 - 23:07:56 -03:00 UTC]
Attack from [Amazon.com, Inc.]
[63.179.93.137][ec2-63-179-93-137.eu-central-1.compute.amazonaws.com]
Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS bl]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
Anonymous
2026-09-05 02:03:51
(15 minutes ago)
Blocked by UFW [80/tcp] | SPT: 58975 | TTL: 121 | LEN: 52 | TOS: 0x00 • Reported by: github.com/sefi ...
show more
Blocked by UFW [80/tcp] | SPT: 58975 | TTL: 121 | LEN: 52 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇩🇪
ecs.ge
2026-09-05 02:01:56
(17 minutes ago)
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack
Hacking
🇩🇪
WellSpring
2026-09-05 01:44:52
(34 minutes ago)
xmlrpc exploit on 159.69.202.189/xmlrpc.php — WellSpr.ing/NetSentinel civic-AI security layer
Brute-Force
Web App Attack
🇺🇸
solantex
2026-09-05 01:43:33
(35 minutes ago)
HTTP reconnaissance: 5 or more 4xx responses within one second from a single source (fail2ban)
Web App Attack
🇩🇪
Mykola Spesivtsev
2026-09-05 01:31:31
(47 minutes ago)
HTTP Tarpit detected bot activity:TargetPort:80, Path:/wp-includes/wlwmanifest.xml, Method:GET, UA:M ...
show more
HTTP Tarpit detected bot activity:TargetPort:80, Path:/wp-includes/wlwmanifest.xml, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.19
show less
Port Scan
Web App Attack
Bad Web Bot
🇧🇷
Vieira Filho
2026-09-05 01:19:38
(59 minutes ago)
63.179.93.137 - - [04/Sep/2026:22:19:35 -0300] [35.198.31.82] "35.198.31.82" "GET /news/wp-includes ...
show more
63.179.93.137 - - [04/Sep/2026:22:19:35 -0300] [35.198.31.82] "35.198.31.82" "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 0.640
63.179.93.137 - - [04/Sep/2026:22:19:35 -0300] [35.198.31.82] "35.198.31.82" "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 0.641
63.179.93.137 - - [04/Sep/2026:22:19:36 -0300] [35.198.31.82] "35.198.31.82" "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 0.638
63.179.93.137 - - [04/Sep/2026:22:19:37 -0300] [35.198.31.82] "35.198.31.82" "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
...
show less
Brute-Force
Web App Attack
Exploited Host
🇩🇪
lolyay
2026-09-05 01:16:45
(1 hour ago)
63.179.93.137 - - [05/Sep/2026:01:16:44 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 200 4 "-" ...
show more
63.179.93.137 - - [05/Sep/2026:01:16:44 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
63.179.93.137 - - [05/Sep/2026:01:16:44 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
🇬🇧
Apache
2026-09-05 01:05:57
(1 hour ago)
(mod_security) mod_security (id:210410) triggered by 63.179.93.137 (DE/Germany/ec2-63-179-93-137.eu- ...
show more
(mod_security) mod_security (id:210410) triggered by 63.179.93.137 (DE/Germany/ec2-63-179-93-137.eu-central-1.compute.amazonaws.com): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
🇫🇮
mnazibo
2026-09-05 01:00:05
(1 hour ago)
Date: 05/Sep/2026 03:21:10 | Reported IP: 63.179.93.137 mod_security | id: 930130 | DE/group.my_doma ...
show more
Date: 05/Sep/2026 03:21:10 | Reported IP: 63.179.93.137 mod_security | id: 930130 | DE/group.my_domain/- | Connections: 2 | Blocked: Permanent Block: [LF_MODSEC] | URIs: /.env; /.env.example | Logs: Restricted File Access Attempt
show less
SQL Injection
Brute-Force
Bad Web Bot
🇳🇱
0xffffffff
2026-09-05 00:56:17
(1 hour ago)
[2026-09-05 03:56:15.601955] [authz_core:error] [pid 3012808:tid 132048056395456] [client 63.179.93. ...
show more
[2026-09-05 03:56:15.601955] [authz_core:error] [pid 3012808:tid 132048056395456] [client 63.179.93.137:53574] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-09-05 03:56:15.609091] [authz_core:error] [pid 3012808:tid 132048073180864] [client 63.179.93.137:53574] AH01630: client denied by server configuration: /var/www/html/ , error_notes:wrong-host , URI:'/'
[2026-09-05 03:56:15.616179] [authz_core:error] [pid 3012808:tid 132048048002752] [client 63.179.93.137:53574] AH01630: client denied by server configuration: /var/www/html/wp-includes , error_notes:wrong-host , URI:'/wp-includes/wlwmanifest.xml'
[2026-09-05 03:56:15.623858] [authz_core:error] [pid 3012808:tid 132047561553600] [client 63.179.93.137:53574] AH01630: client denied by server configuration: /var/www/html/xmlrpc.php , error_notes:wrong-host , URI:'/xmlrpc.php?rsd'
[2026-09-05 03:56:15.631002] [authz_core:error] [pid 3012808:tid 132047553160896] [client 63.179.93.137:53574] AH01630: client
show less
Web App Attack
Bad Web Bot
🇺🇸
Rip
2026-09-05 00:54:56
(1 hour ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
🇫🇷
masterguru
2026-09-05 00:53:55
(1 hour ago)
Host header is a numeric IP address. Pattern match "^ (920350-131)
Hacking
Bad Web Bot
🇩🇪
big-cloud.nl
2026-09-05 00:45:10
(1 hour ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇩🇪
klaus_ph
2026-09-05 00:42:56
(1 hour ago)
[Sat Sep 05 02:42:43.519345 2026] [php:error] [pid 2562100] [client 63.179.93.137:61072] script '/va ...
show more
[Sat Sep 05 02:42:43.519345 2026] [php:error] [pid 2562100] [client 63.179.93.137:61072] script '/var/www/html/xmlrpc.php' not found or unable to stat
...
show less
Brute-Force