|
🇺🇸
151.240.64.133
|
|
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 151.240.64.133 - - [30/Oct/2026:04:51:22 +0100] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇱🇹
91.224.92.87
|
|
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 91.224.92.87 - - [30/Oct/2026:04:51:10 +0100] "GET /.env HTTP/1.1" 403 7926 "-" "Mozilla/5.0 (compatible; SMTP-Scanner)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
176.110.218.35
|
|
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 176.110.218.35 - - [30/Oct/2026:04:50:25 +0100] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 640 "-" "Go-http-client/1.1"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
52.191.203.0
|
|
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 52.191.203.0 - - [30/Oct/2026:04:49:58 +0100] "GET /.env.txt HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇪
20.13.164.162
|
|
[cb-14al] SSH brute-force: 5 failed attempts detected by fail2ban jail ssh-iptables.
|
Brute-Force
SSH
|
|
🇵🇰
154.57.216.142
|
|
[cb-13al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
|
Brute-Force
SSH
|
|
🇷🇸
152.89.160.131
|
|
[ti-01ov] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail <name>. Example: ...
show more
[ti-01ov] WordPress XML-RPC abuse: 3 suspicious requests detected by fail2ban jail <name>. Example: 152.89.160.131 - - \[30/Oct/2026:04:39:54 +0100\] "POST /xmlrpc.php HTTP/1.1" 403 5807 "-" "Go-http-client/1.1"
152.89.160.131 - - \[30/Oct/2026:04:43:59 +0100\] "POST /xmlrpc.php HTTP/1.1" 403 5768 "-" "Go-http-client/1.1"
152.89.160.131 - - \[30/Oct/2026:04:47:52 +0100\] "POST /xmlrpc.php HTTP/1.1" 403 5768 "-" "Go-http-client/1.1"
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
2602:80d:1006::29
|
|
[ti-03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2602:80d:1006::29 - - [30/Oct/2026:04:47:48 +0100] "GET /phpinfo.php HTTP/1.1" 301 487 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
64.252.119.214
|
|
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 64.252.119.214 - - [30/Oct/2026:04:47:22 +0100] "GET /alfa.php HTTP/2.0" 404 81405 "-" "Amazon CloudFront"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇷🇺
80.115.194.125
|
|
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 80.115.194.125 - - [30/Oct/2026:04:46:55 +0100] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
80.115.194.125 - - [30/Oct/2026:04:46:59 +0100] "GET /wp-json/wp/v2/users?context=edit&_fields=slug&per_page=100&page=1 HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
80.115.194.125 - - [30/Oct/2026:04:46:59 +0100] "GET /wp/wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
168.144.250.235
|
|
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 168.144.250.235 - - [30/Oct/2026:04:44:58 +0100] "POST /xmlrpc.php HTTP/1.1" 404 154436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36"
168.144.250.235 - - [30/Oct/2026:04:45:41 +0100] "POST /wp-login.php HTTP/1.1" 302 309 "http://www.vissenoploosdrecht.nl/wp-admin/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6.1 Safari/605.1.15"
168.144.250.235 - - [30/Oct/2026:04:45:47 +0100] "POST /wp-login.php HTTP/1.1" 302 309 "http://www.vissenoploosdrecht.nl/wp-admin/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36"
vissenoplo
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
62.169.135.193
|
|
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 62. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 62.169.135.193 - - \[30/Oct/2026:04:45:38 +0100\] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 403 521 "http://bxlsysteembouw.nl/wp-content/plugins/buddypress/alfa.php" "Go-http-client/1.1"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇦
62.169.135.223
|
|
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 62. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 62.169.135.223 - - \[30/Oct/2026:04:45:38 +0100\] "GET /wp-content/plugins/buddypress/alfa.php HTTP/1.1" 301 501 "-" "Go-http-client/1.1"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇳
111.29.38.32
|
|
[cb-13al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
|
Brute-Force
SSH
|
|
🇺🇸
2602:80d:1007::24
|
|
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2602:80d:1007::24 - - [30/Oct/2026:04:44:11 +0100] "GET /phpinfo.php HTTP/1.1" 403 579 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇷🇺
188.168.161.110
|
|
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 188.168.161.110 - - [30/Oct/2026:04:43:18 +0100] "GET /wp-json/stockholm-core/v1/users?per_page=100 HTTP/2.0" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
188.168.161.110 - - [30/Oct/2026:04:43:19 +0100] "GET /wp-json/ithemes-security/v1/users?per_page=100 HTTP/2.0" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
188.168.161.110 - - [30/Oct/2026:04:43:19 +0100] "GET /wp-json/yoast/v1/users?per_page=100 HTTP/2.0" 404 565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
188.168.161.110 - - [30/Oct/2026:04:43:
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
144.48.243.18
|
|
[cb-13al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
|
Brute-Force
SSH
|
|
🇯🇵
160.251.202.248
|
|
[cb-13al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
|
Brute-Force
SSH
|
|
🇨🇳
180.76.188.229
|
|
[cb-13al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
|
Brute-Force
SSH
|
|
🇦🇺
45.132.224.90
|
|
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.132.224.90 - - [30/Oct/2026:04:42:23 +0100] "GET /wp-content/plugins/buddypress/alfa.php HTTP/2.0" 404 36 "http://csrmethode.nl/wp-content/plugins/buddypress/alfa.php" "Go-http-client/2.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇩
103.59.161.220
|
|
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 103.59.161.220 - - [30/Oct/2026:04:41:54 +0100] "GET /wp-admin/css HTTP/1.1" 404 6878 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.220 - - [30/Oct/2026:04:41:55 +0100] "GET /wp-admin/images HTTP/1.1" 404 6878 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.220 - - [30/Oct/2026:04:41:56 +0100] "GET /wp-admin/includes HTTP/1.1" 404 6878 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.220 - - [30/Oct/2026:04:41:56 +0100] "GET /wp-admin/js HTTP/1.1" 404 6878 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.220 - - [30/Oct/2026:04:41:57 +0100] "GET /wp-admin/maint HTTP/1.1" 404 6878 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
img-group.nl:443
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇳
106.75.77.231
|
|
[cb-13al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
|
Brute-Force
SSH
|
|
🇺🇸
2602:80d:1007::3b
|
|
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2602:80d:1007::3b - - [30/Oct/2026:04:41:56 +0100] "GET /phpinfo.php HTTP/1.1" 301 487 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇳
218.56.160.82
|
|
[cb-13al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
|
Brute-Force
SSH
|
|
🇧🇷
45.190.252.122
|
|
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.190.252.122 - - [30/Oct/2026:04:41:26 +0100] "GET /.env HTTP/1.1" 301 612 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
...
show less
|
Bad Web Bot
Web App Attack
|