🇩🇪
LRob.fr
2026-06-18 03:30:03
(1 day ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
2026-04-14 19:45:20
(2 months ago)
Failed Wordpress Logins
Web App Attack
🇩🇪
ValtonTahiri
2026-02-03 10:49:46
(4 months ago)
Honeypot hit: HTTP GET http://[SOME-IP]/.aws/credentials
URL: http://[SOME-IP]/.aws/credentials
Meth ...
show more
Honeypot hit: HTTP GET http://[SOME-IP]/.aws/credentials
URL: http://[SOME-IP]/.aws/credentials
Method: GET
Status: 200
User-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36
Host: [SOME-IP]
Accept: */*
Other Headers: accept-encoding: *, connection: keep-alive
show less
Hacking
Bad Web Bot
🇺🇸
NetGuard
2026-02-03 04:44:18
(4 months ago)
🚨 CRITICAL: Real-time threat on Tanner | unknown | Port 80 | PhantomGrid Real-time Defense
Hacking
🇩🇪
mondor.ro
2025-11-24 00:57:42
(6 months ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 91.193.232.105, Re ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, TEMPDENY 91.193.232.105, Reason:[91.193.232.105 (US/United States/-), more than 60 Apache 404 hits in the last 3600 secs]; Ports: 80,443; Direction: in; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
🇫🇷
dynamix
2025-10-26 23:11:45
(7 months ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Site.eu
2025-10-18 09:21:07
(8 months ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
neckaralb-admin.de
2025-10-17 16:09:48
(8 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇱🇹
juozaspo
2025-10-17 13:58:36
(8 months ago)
Automatic Report: Too much requests to non-existing pages in a very short time, auto-banned
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-16 07:41:25
(8 months ago)
(mod_security) mod_security (id:240000) triggered by 91.193.232.105 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 91.193.232.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 03:39:38.634470 2025] [security2:error] [pid 18274:tid 18274] [client 91.193.232.105:46995] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||platinumkissband.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "platinumkissband.com"] [uri "/images/stories/themes.php"] [unique_id "aPChOj7LT3dNdyWzZbc2YwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-16 06:44:36
(8 months ago)
(mod_security) mod_security (id:240000) triggered by 91.193.232.105 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240000) triggered by 91.193.232.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 16 02:43:26.403957 2025] [security2:error] [pid 14167:tid 14173] [client 91.193.232.105:29041] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.andyboynton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.andyboynton.com"] [uri "/images/stories/themes.php"] [unique_id "aPCUDmUv4SFqO2tk7JbCAwAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-10-16 02:08:14
(8 months ago)
Multiple WAF Violations
Web App Attack
🇮🇪
Jim Keir
2025-10-15 21:29:08
(8 months ago)
2025-10-15 21:29:08 91.193.232.105 File scanning, blocking 91.193.232.105 for 5 minutes
Web App Attack
🇺🇸
oralunal
2025-10-14 07:29:45
(8 months ago)
91.193.232.105 - - [14/Oct/2025:07:29:43 +0000] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP ...
show more
91.193.232.105 - - [14/Oct/2025:07:29:43 +0000] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
91.193.232.105 - - [14/Oct/2025:07:29:43 +0000] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36"
91.193.232.105 - - [14/Oct/2025:07:29:43 +0000] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.193.232.105 - - [14/Oct/2025:07:29:43 +0000] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0"
91.193.232.105 - - [14/Oct/2025:07:29:43 +0000] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko
...
show less
Bad Web Bot
Web App Attack
2025-10-14 04:41:02
(8 months ago)
wordpress-trap
Web App Attack