🇩🇪
Live Home Cams
2026-11-12 17:50:49
UTC ·
(4 hours ago)
WebApp brute force attack detected. Multiple file scanning attempts from 79.124.23.196. Detected by fail2ban.
Web App Attack
Brute-Force
🇩🇪
Hazzard
2026-11-08 18:17:40
UTC ·
(4 days ago)
(wordpress) Failed wordpress login from 79.124.23.196 (BG/Bulgaria/Plovdiv/Plovdiv/-/[redacted]): (CF_ENABLE)
Brute-Force
🇩🇪
LRob
2026-11-07 16:02:14
UTC ·
(5 days ago)
WordPress attack-tool calls | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64; rv:148.0) Gecko/20100101 Firefox/148.0 | 2026-11-07 16:02 UTC
Web App Attack
Hacking
🇪🇸
pipeline.es
2026-11-05 15:39:17
UTC ·
(1 week ago)
WordPress login brute-force | URL: https://gacetadelturismo.com/wp-login.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-11-05T15:36:42Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\" ...
show more
WordPress login brute-force | URL: https://gacetadelturismo.com/wp-login.php | Evidence: {\"integration\":\"wordfence\",\"ts\":\"2026-11-05T15:36:42Z\",\"action\":\"blocked:wfsn\",\"description\":\"Blocked by Wordfence Security Network\",\"srcip\":\"79.124.23.196\",\"status_code\":503,\"url\":\"https://gacetadelturismo.com/wp-login.php\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36\",\"wfid\":4748904} | ASN: Telehouse EAD | Country: BG
show less
Brute-Force
🇨🇿
Countryman
2026-11-05 01:10:01
UTC ·
(1 week ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇫🇷
LRob
2026-11-04 20:53:46
UTC ·
(1 week ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36
Bad Web Bot
🇺🇸
dtorrer
2026-11-04 15:25:46
UTC ·
(1 week ago)
Brute-force general attack.
Brute-Force
🇺🇸
TPI-Abuse
2026-11-04 14:47:10
UTC ·
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 79.124.23.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 09:47:07.251684 2026] [security2:error] [pid 7254:tid 7254] [client 79.124.23.196:40526] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 79.124.23.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 09:47:07.251684 2026] [security2:error] [pid 7254:tid 7254] [client 79.124.23.196:40526] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||armorcorp.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "armorcorp.com"] [uri "/wp-json/wp/v2/users"] [unique_id "autFa2Bxr5Zk6tdAN-CRVAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-04 12:39:47
UTC ·
(1 week ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 79.124.23.196 (BG/Bulgaria/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/11/04 13:39:38 [error] 4000974#4000974: *2923453 access forbidden by rule, ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 79.124.23.196 (BG/Bulgaria/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/11/04 13:39:38 [error] 4000974#4000974: *2923453 access forbidden by rule, client: 79.124.23.196, server: lastoriadelcalcio.accademiam.com, request: "GET /?author=4&feed=rss2 HTTP/2.0", host: "lastoriadelcalcio.accademiam.com"
2026/11/04 13:39:38 [error] 4000974#4000974: *2923453 access forbidden by rule, client: 79.124.23.196, server: lastoriadelcalcio.accademiam.com, request: "GET /?author=5&feed=rss2 HTTP/2.0", host: "lastoriadelcalcio.accademiam.com"
2026/11/04 13:39:38 [error] 4000974#4000974: *2923453 access forbidden by rule, client: 79.124.23.196, server: lastoriadelcalcio.accademiam.com, request: "GET /?author=5&feed=rss2 HTTP/2.0", host: "lastoriadelcalcio.accademiam.com"
show less
Port Scan
🇺🇸
cwytech
2026-11-01 17:32:40
UTC ·
(1 week ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
2026-10-28 16:52:40
UTC ·
(2 weeks ago)
Web application attack detected.
Web App Attack
🇺🇸
lostswordfish.com
2026-10-28 11:04:03
UTC ·
(2 weeks ago)
Wordfence waf block on advocates4change
Web App Attack
🇺🇸
dtorrer
2026-10-24 16:55:16
UTC ·
(2 weeks ago)
Brute-force general attack.
Brute-Force
🇺🇸
TPI-Abuse
2026-10-14 20:11:04
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 79.124.23.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:10:56.805512 2026] [security2:error] [pid 31709:tid 31709] [client 79.124.23.196:54524] M ...
show more
(mod_security) mod_security (id:225170) triggered by 79.124.23.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:10:56.805512 2026] [security2:error] [pid 31709:tid 31709] [client 79.124.23.196:54524] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||realdesigninterior.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "realdesigninterior.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as_h0NAZpOJ753NYon7SggAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 14:59:30
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:225170) triggered by 79.124.23.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 10:59:23.300541 2026] [security2:error] [pid 11276:tid 11276] [client 79.124.23.196:37007] M ...
show more
(mod_security) mod_security (id:225170) triggered by 79.124.23.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 10:59:23.300541 2026] [security2:error] [pid 11276:tid 11276] [client 79.124.23.196:37007] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||midway-island.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "midway-island.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as-Yy2SUvUiiG3CfkIaNfgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
