🇺🇸
185.223.152.32
29 minutes ago
[ti-14al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Examp ...
show more
[ti-14al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Example: 185.223.152.32 - - \[30/Sep/2026:03:10:17 +0200\] "POST /wp-login.php HTTP/1.1" 200 8698 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
185.223.152.32 - - \[30/Sep/2026:03:16:23 +0200\] "POST /wp-login.php HTTP/1.1" 301 4691 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; rv:143.0\) Gecko/20100101 Firefox/143.0"
185.223.152.32 - - \[30/Sep/2026:03:18:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 9624 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
185.223.152.32 - - \[30/Sep/2026:03:19:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 8698 "-" "Mozilla/5.0 \(Macintosh\
...
show less
Brute-Force
Web App Attack
🇺🇸
185.223.152.27
29 minutes ago
[ti-14al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Examp ...
show more
[ti-14al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail <name>. Example: 185.223.152.27 - - \[30/Sep/2026:03:09:21 +0200\] "POST /wp-login.php HTTP/1.1" 200 9624 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; rv:143.0\) Gecko/20100101 Firefox/143.0"
185.223.152.27 - - \[30/Sep/2026:03:12:35 +0200\] "POST /wp-login.php HTTP/1.1" 301 4697 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; rv:143.0\) Gecko/20100101 Firefox/143.0"
185.223.152.27 - - \[30/Sep/2026:03:18:44 +0200\] "POST /wp-login.php HTTP/1.1" 503 25470 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
185.223.152.27 - - \[30/Sep/2026:03:19:16 +0200\] "POST /wp-login.php HTTP/1.1" 301 4675 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\)
...
show less
Brute-Force
Web App Attack
🇲🇦
105.72.61.253
29 minutes ago
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 105 ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 105.72.61.253 - - \[30/Sep/2026:03:18:59 +0200\] "GET /.env HTTP/1.1" 301 604 "-" "Mozilla/5.0 \(Linux\; U\; Android 4.4.2\; en-US\; HM NOTE 1W Build/KOT49H\) AppleWebKit/534.30 \(KHTML, like Gecko\) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
66.132.195.36
30 minutes ago
[cb-04al] Mail server brute-force: 5 failed attempts detected by fail2ban jail exim-iptables.
Brute-Force
🇸🇬
85.203.23.144
30 minutes ago
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: ...
Bad Web Bot
Web App Attack
🇸🇬
85.203.23.121
30 minutes ago
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: ...
Bad Web Bot
Web App Attack
🇸🇬
85.203.23.114
30 minutes ago
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: ...
Bad Web Bot
Web App Attack
🇸🇬
85.203.23.109
30 minutes ago
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: ...
Bad Web Bot
Web App Attack
🇮🇩
69.5.7.218
30 minutes ago
[cb-05al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
Brute-Force
SSH
🇵🇱
45.138.12.16
31 minutes ago
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 45. ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 45.138.12.16 - - \[30/Sep/2026:03:17:28 +0200\] "GET /.git/config HTTP/1.1" 403 5406 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:64.0\) Gecko/20100101 Firefox/64.0"
...
show less
Bad Web Bot
Web App Attack
🇯🇵
20.89.68.9
31 minutes ago
[ti-02ra] SSH brute-force: 3 failed attempts detected by fail2ban jail sshd.
Brute-Force
SSH
🇮🇩
38.253.224.47
33 minutes ago
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 38.253.224.47 - - [30/Sep/2026:03:14:41 +0200] "GET /wp-admin/ HTTP/1.1" 404 418 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [30/Sep/2026:03:14:44 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 418 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [30/Sep/2026:03:14:46 +0200] "GET /wp-admin/images/ HTTP/1.1" 404 418 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [30/Sep/2026:03:14:48 +0200] "GET /wp-admin/includes/ HTTP/1.1" 404 418 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [30/Sep/2026:03:14:50 +0200] "GET /wp-admin/js/ HTTP/1.1" 404 418 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [30/Sep/2026:03:14:52 +0200]
...
show less
Bad Web Bot
Web App Attack
🇺🇸
209.141.51.90
33 minutes ago
[ti-30al] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
Brute-Force
SSH
🇦🇪
145.241.125.52
34 minutes ago
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 145.241.125.52 - - [30/Sep/2026:03:13:40 +0200] "GET /readme.html HTTP/1.1" 404 192823 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
145.241.125.52 - - [30/Sep/2026:03:13:43 +0200] "GET /wp-content/themes/Avada/page-templates/ HTTP/1.1" 404 192791 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
145.241.125.52 - - [30/Sep/2026:03:13:45 +0200] "GET /wp-content/themes/twentytwentyfive/page-templates/ HTTP/1.1" 404 192809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
145.241.125.52 - - [30/Sep/2026:03:13:47 +
...
show less
Bad Web Bot
Web App Attack
🇳🇱
45.148.10.141
34 minutes ago
[mx02al] SSH brute-force: 5 failed attempts detected by fail2ban jail ssh-iptables.
Brute-Force
SSH
🇸🇬
168.144.96.53
34 minutes ago
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 168.144.96.53 - - [30/Sep/2026:03:14:43 +0200] "GET /.git/config HTTP/1.1" 301 509 "https://www.google.com/search?q=www.voetklachten.com" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
192.42.116.52
34 minutes ago
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: .. ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: ...
show less
Bad Web Bot
Web App Attack
🇸🇪
171.25.193.79
34 minutes ago
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: .. ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: ...
show less
Bad Web Bot
Web App Attack
🇩🇪
45.139.104.164
35 minutes ago
[ftpbd] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 45.13 ...
show more
[ftpbd] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 45.139.104.164 - - \[30/Sep/2026:03:13:29 +0200\] "GET /.git/config HTTP/1.1" 404 7199 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/18.1 Mobile/15E148 Safari/604.1"
45.139.104.164 - - \[30/Sep/2026:03:13:29 +0200\] "GET /.git/config HTTP/1.1" 404 7199 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/134.0.0.0 Safari/537.36"
45.139.104.164 - - \[30/Sep/2026:03:13:29 +0200\] "GET /.git/config HTTP/1.1" 404 7199 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10.13\; rv:109.0\) Gecko/20100101 Firefox/115.0"
45.139.104.164 - - \[30/Sep/2026:03:13:29 +0200\] "GET /.git/config HTTP/1.1" 404 7199 "-" "Mozilla/5.0
...
show less
Bad Web Bot
Web App Attack
🇰🇷
118.39.219.45
35 minutes ago
[testbd] SSH brute-force: 5 failed attempts detected by fail2ban jail sshd.
Brute-Force
SSH
🇸🇬
104.28.163.234
35 minutes ago
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 104 ...
show more
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 104.28.163.234 - - \[30/Sep/2026:03:13:14 +0200\] "GET /.env.backup HTTP/1.1" 301 537 "https://www.google.com/search\?q=modumgroup.com" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/135.0.0.0 Safari/537.36"
104.28.163.234 - - \[30/Sep/2026:03:13:14 +0200\] "GET /.git/config HTTP/1.1" 301 537 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; ChatGPT-User/1.0\; +https://openai.com/bot\)"
...
show less
Bad Web Bot
Web App Attack
🇸🇬
167.172.64.222
35 minutes ago
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 167 ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 167.172.64.222 - - \[30/Sep/2026:03:13:16 +0200\] "GET /.env.local HTTP/1.1" 301 5709 "https://fair-al-excat.swi-ftharp-ers-tar.workers.dev/proxy\?modify\&proxyUrl=http%3A%2F%2Fmodumgroup.com%2F.env.local" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
35.204.201.230
35 minutes ago
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.204.201.230 - - [30/Sep/2026:03:13:04 +0200] "GET /assets../.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Bad Web Bot
Web App Attack
🇱🇺
205.147.26.8
35 minutes ago
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 205.147.26.8 - - [30/Sep/2026:03:13:12 +0200] "GET /.env HTTP/2.0" 404 394 "-" "Mozilla/5.0 (Linux; Android 10; VOG-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.36 OPR/76.2.4027.73374"
...
show less
Bad Web Bot
Web App Attack
🇸🇬
159.223.76.52
36 minutes ago
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 159 ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 159.223.76.52 - - \[30/Sep/2026:03:12:17 +0200\] "GET /.env.local HTTP/1.1" 301 6556 "https://delicate-salad-1aad.s0ft3bzz.workers.dev/proxy\?modify\&proxyUrl=http%3A%2F%2Fwww.teambuilding-zeilen.nl%2F.env.local" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack