๐บ๐ธ
TPI-Abuse
2025-12-04 23:24:04
(9 months ago)
(mod_security) mod_security (id:210730) triggered by 78.159.101.157 (opal9.opalstack.com): 1 in the ...
show more
(mod_security) mod_security (id:210730) triggered by 78.159.101.157 (opal9.opalstack.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 18:24:01.058057 2025] [security2:error] [pid 9024:tid 9041] [client 78.159.101.157:44170] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nextlevelpsych.com|F|2"] [data ".com_hdflvplayer.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nextlevelpsych.com"] [uri "/components/com_hdflvplayer/language/en-GB.com_hdflvplayer.ini"] [unique_id "aTIYEdRRZeJPlZoQ1HzwSwAAAUo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
hbrks
2025-11-14 22:25:05
(10 months ago)
1 attack(s) detected, such as these: {"event":"nginx_block","ip":"78.159.101.157","host":"adalta.soc ...
show more
1 attack(s) detected, such as these: {"event":"nginx_block","ip":"78.159.101.157","host":"adalta.social","request":"GET /actor/outbox HTTP/1.1","user_agent":"Mastodon/4.4.5 (http.rb/5.3.1; https://social.beeps.gay/)","reason":"404","timestamp":"2025-11-14T22:25:05 00:00","logentry":"adalta.social 78.159.101.157 - - [14/Nov/2025:22:25:05 0000] GET /actor/outbox HTTP/1.1 404 21 - Mastodon/4.4.5 (http.rb/5.3.1; https://social.beeps.gay/) 172.25.79.88:3000 matched:-"} * Report Details *: https://p4u.xyz/I0MS8AYY4AO/1* IP Details *: https://p4u.xyz/I0MS8AYY4AO/2
show less
Web Spam
Hacking
Bad Web Bot
Anonymous
2025-10-03 14:02:29
(11 months ago)
Web attack
Bad Web Bot
Web App Attack
๐ฉ๐ช
bogdanv
2025-09-07 04:59:55
(1 year ago)
$f2bV_matches
DDoS Attack
Web Spam
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2025-02-13 13:08:00
(1 year ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
๐น๐ท
rtbh.com.tr
2025-02-10 20:49:58
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2025-02-09 20:50:01
(1 year ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐จ๐ฆ
KIsmay
2025-02-09 15:16:42
(1 year ago)
Feb 9 08:28:36 www4 WPAudit[1752105]: 78.159.101.157 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; ...
show more
Feb 9 08:28:36 www4 WPAudit[1752105]: 78.159.101.157 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" vhsport:54vhsport FAIL
Feb 9 09:23:20 www4 WPAudit[1753657]: 78.159.101.157 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" admin1:admin1123 FAIL
Feb 9 09:38:30 www4 WPAudit[1753657]: 78.159.101.157 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" useradmin:123456 FAIL
Feb 9 09:49:47 www4 WPAudit[1753657]: 78.159.101.157 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" adminry:adminry21 FAIL
Feb 9 10:16:41 www4 WPAudit[1762588]: 78.159.101.157 www.vhsport.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537
...
show less
Brute-Force
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2025-02-09 15:04:19
(1 year ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
DE/Germany/opal9.opalstack.com
Web App Attack
๐ฌ๐ง
noise.agency
2025-02-09 13:04:47
(1 year ago)
(wordpress) Failed wordpress login from 78.159.101.157 (DE/Germany/opal9.opalstack.com)
Brute-Force
๐ฆ๐บ
AWW-Admin
2025-02-09 13:01:51
(1 year ago)
(wordpress) Failed wordpress login from 78.159.101.157 (DE/Germany/opal9.opalstack.com)
Brute-Force
๐ฉ๐ช
Ba-Yu
2025-02-09 12:58:18
(1 year ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
๐ณ๐ฑ
Fr13nds.Tech
2025-02-09 10:17:44
(1 year ago)
78.159.101.157 - - [09/Feb/2025:11:06:45 0100] "POST /wp-login.php HTTP/1.0" 200 3414 "https://webt ...
show more
78.159.101.157 - - [09/Feb/2025:11:06:45 0100] "POST /wp-login.php HTTP/1.0" 200 3414 "https://webtelegram.[munged]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
78.159.101.157 - - [09/Feb/2025:11:11:55 0100] "POST /wp-login.php HTTP/1.0" 200 3409 "https://site.wp.[munged]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
78.159.101.157 - - [09/Feb/2025:11:13:17 0100] "POST /wp-login.php HTTP/1.0" 200 3409 "https://wordpress.wp.[munged]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
78.159.101.157 - - [09/Feb/2025:11:15:02 0100] "POST /wp-login.php HTTP/1.0" 200 3410 "https://blog.wp.[munged]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
78.159.101.157 - - [09/Feb/2025:11:17:41 0100] "PO
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Nerdscave Hosting
2025-02-09 08:10:07
(1 year ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
๐ฉ๐ช
karger
2025-02-09 07:00:49
(1 year ago)
Wordpress attack - hard filter
Brute-Force
Web App Attack