|
Anonymous
|
|
wordpress authentication brute force
|
Brute-Force
Web App Attack
|
|
|
Anonymous
|
|
[ssd5.kdns.gr] httpd-login-spray-site: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anasta ...
show more
[ssd5.kdns.gr] httpd-login-spray-site: sites=e-anastasiadis.gr; logs=/var/log/httpd/domains/e-anastasiadis.gr.log; samples=site_wide=true | distinct_ips=48 | /wp-login.php
show less
|
Hacking
Web App Attack
|
|
|
🇫🇷
tilellit.pro
|
|
Fail2Ban banned 65.111.30.162 for security violations in jail wp-armour. Log: 2026/05/30 03:39:53 [e ...
show more
Fail2Ban banned 65.111.30.162 for security violations in jail wp-armour. Log: 2026/05/30 03:39:53 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 65.111.30.162 | Target: wplogin" , client: 65.111.30.162, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
|
Web Spam
|
|
|
🇺🇸
dtorrer
|
|
Brute-force general attack.
|
Brute-Force
|
|
|
🇲🇽
octageeks.com
|
|
Wordpress malicious attack:[octaflood]
|
Web App Attack
|
|
|
🇺🇸
lostswordfish.com
|
|
Wordfence waf block on parsol
|
Web App Attack
|
|
|
🇦🇺
RedBear IT
|
|
"DDoS against public endpoint"
|
DDoS Attack
|
|
|
🇵🇱
Kashir
|
|
Bad bot probing scripts for app vulnerabilities
|
Web App Attack
|
|
|
Anonymous
|
|
wordpress-trap
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 07 13:42:07.489390 2026] [security2:error] [pid 11282:tid 11282] [client 65.111.30.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ard.global"] [uri "/.git/HEAD"] [unique_id "aV6o_yM5xfjhjrmjy83u1QAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 13:39:50.739107 2026] [security2:error] [pid 3946:tid 3946] [client 65.111.30.162:35215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mytemp.info.joshuashands.org"] [uri "/.svn/wc.db"] [unique_id "aVgQ9oqhQp7AjRJIIMs6_wAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:40:08.875805 2025] [security2:error] [pid 29601:tid 29601] [client 65.111.30.162:41561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "impactqualityinc.com"] [uri "/.git/HEAD"] [unique_id "aVIUOKKAl4JpihZobMbwBAAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.30.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:04:05.362786 2025] [security2:error] [pid 16967:tid 16967] [client 65.111.30.162:34163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franzexpress.com"] [uri "/.svn/wc.db"] [unique_id "aVH9tS9BhAjwAfG6wVzUWwAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇮🇹
VHosting
|
|
Detected attack and reported by a human
|
DDoS Attack
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
|
|
|
🇦🇺
MAGIC
|
|
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
|
DDoS Attack
Bad Web Bot
|
|