🇩🇪
netclix.gr
2026-06-06 14:53:21
(4 days ago)
(bot_qv) Bot Scraping QuickView 77.48.28.239 (CZ/Czechia/www.tor-exitnode-read-this-html.epizy.com): ...
show more
(bot_qv) Bot Scraping QuickView 77.48.28.239 (CZ/Czechia/www.tor-exitnode-read-this-html.epizy.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 77.48.28.239 - - [06/Jun/2026:17:53:16 +0300] "GET /index.php?dispatch=products.quick_view&product_id=15660&prev_url=index.php%3Fdispatch%3Dcategories.view%26category_id%3D1386&n_items=15661%2C15660%2C15659%2C15658%2C15657%2C15652%2C15651%2C15649%2C15647%2C15643%2C15641%2C15638 HTTP/1.1" 302 5 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com)"
show less
Port Scan
🇺🇸
Victor López
2026-06-04 23:41:04
(6 days ago)
buscaempresas.co 77.48.28.239 - - [04/Jun/2026:18:40:59 -0500] "GET /wp-login.php HTTP/1.1" 404 7699 ...
show more
buscaempresas.co 77.48.28.239 - - [04/Jun/2026:18:40:59 -0500] "GET /wp-login.php HTTP/1.1" 404 7699 "-" "Mozilla/5.0 (Linux; Android 13; SM-A135F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
buscaempresas.co 77.48.28.239 - - [04/Jun/2026:18:41:01 -0500] "GET /wp-login.php HTTP/1.1" 404 7699 "-" "Mozilla/5.0 (Linux; Android 13; SM-A135F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
buscaempresas.co 77.48.28.239 - - [04/Jun/2026:18:41:03 -0500] "GET /wp-login.php HTTP/1.1" 404 7699 "-" "Mozilla/5.0 (Linux; Android 13; SM-A135F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36"
...
show less
Hacking
Web App Attack
2026-06-03 02:00:40
(1 week ago)
2026-06-02 17:00:05,815 fail2ban.actions [3625835]: NOTICE [tor] Ban 77.48.28.239
2026-06-02 ...
show more
2026-06-02 17:00:05,815 fail2ban.actions [3625835]: NOTICE [tor] Ban 77.48.28.239
2026-06-02 20:00:05,713 fail2ban.actions [3625835]: NOTICE [tor] Ban 77.48.28.239
2026-06-02 23:00:13,801 fail2ban.actions [3625835]: NOTICE [tor] Ban 77.48.28.239
2026-06-03 02:00:22,918 fail2ban.actions [3625835]: NOTICE [tor] Ban 77.48.28.239
2026-06-03 05:00:39,845 fail2ban.actions [3625835]: NOTICE [tor] Ban 77.48.28.239
show less
Brute-Force
🇨🇦
leithzz
2026-05-23 04:38:52
(2 weeks ago)
Report by Cloudflare.Time: 2026-05-23T04:37:02Z
DDoS Attack
🇫🇷
✨
2026-05-22 23:14:18
(2 weeks ago)
Rule : PLESK BOT
2026-05-23 01:12:55 Unauthorized login attempt to Plesk Panel from IP 77.48.28.239 ...
show more
Rule : PLESK BOT
2026-05-23 01:12:55 Unauthorized login attempt to Plesk Panel from IP 77.48.28.239 with username administrator
show less
Hacking
Brute-Force
Web App Attack
🇷🇴
Fn4ticHz
2026-05-09 14:14:47
(1 month ago)
Repeated DDoS targeted -- ZeroGuard X ManagedSRV
DDoS Attack
Exploited Host
🇨🇭
YF
2026-04-27 23:05:07
(1 month ago)
Environment file probe
Web App Attack
🇱🇻
garmtech.com
2026-04-25 22:15:07
(1 month ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-15.77.48.28.239.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-15.77.48.28.239.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇫🇮
nNordic
2026-04-24 06:59:45
(1 month ago)
Connection attempt blocked by IDS/IPS from 77.48.28.239/32
Hacking
🇫🇷
✨
2026-04-18 02:34:11
(1 month ago)
Rule : PLESK BOT
2026-04-17 17:39:39 Unauthorized login attempt to Plesk Panel from IP 77.48.28.239 ...
show more
Rule : PLESK BOT
2026-04-17 17:39:39 Unauthorized login attempt to Plesk Panel from IP 77.48.28.239 with username administrator
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
LRob.fr
2026-04-07 21:45:16
(2 months ago)
Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk- ...
show more
Plesk panel login attempt with forbidden username (root/admin), blocked by Fail2Ban in custom-plesk-login jail
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 12:36:30
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 77.48.28.239 (239.192-26.28.48.77.in-addr.arpa) ...
show more
(mod_security) mod_security (id:210492) triggered by 77.48.28.239 (239.192-26.28.48.77.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 08:36:20.659499 2026] [security2:error] [pid 19738:tid 19738] [client 77.48.28.239:7213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-gibraltar.com"] [uri "/.git/config"] [unique_id "adOoxFUXp3ymSW5W_mmGqQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-01 08:01:21
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 77.48.28.239 (239.192-26.28.48.77.in-addr.arpa) ...
show more
(mod_security) mod_security (id:210492) triggered by 77.48.28.239 (239.192-26.28.48.77.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 01 04:01:14.497405 2026] [security2:error] [pid 28134:tid 28134] [client 77.48.28.239:35905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wisk.org"] [uri "/.git/config"] [unique_id "aczQykBWbd20DYmGwrqW2AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MF Network
2026-04-01 07:52:31
(2 months ago)
Bad Calls: Webpage scraping, Web App Attack
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
nyt
2026-04-01 06:50:51
(2 months ago)
SQLi
SQL Injection
Web App Attack