π¬π§
178.128.162.249
18 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Fri Sep 18 02:28:34.883715 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Fri Sep 18 02:28:34.883715 2026] [access_compat:error] [pid 149082:tid 149082] [client 178.128.162.249:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/09/index.php, referer: binance.com[Fri Sep 18 02:28:37.008332 2026] [access_compat:error] [pid 149076:tid 149076] [client 178.128.162.249:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/08/index.php, referer: binance.com
show less
Web App Attack
πΊπΈ
136.144.19.193
18 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Fri Sep 18 02:09:48.236128 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Fri Sep 18 02:09:48.236128 2026] [access_compat:error] [pid 148790:tid 148790] [client 136.144.19.193:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/hp2.php, referer: http://[redacted-domain]/wp-includes/hp2.php[Fri Sep 18 02:10:06.342657 2026] [access_compat:error] [pid 149008:tid 149008] [client 136.144.19.193:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/txets.php, referer: http://[redacted-domain]/wp-includes/txets.ph
show less
Web App Attack
π©πͺ
64.89.163.182
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 21:01:03.872523 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 21:01:03.872523 2026] [access_compat:error] [pid 144235:tid 144235] [client 64.89.163.182:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/hp2.php, referer: http://[redacted-domain]/wp-includes/hp2.php[Thu Sep 17 21:01:26.374365 2026] [access_compat:error] [pid 144194:tid 144194] [client 64.89.163.182:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/txets.php, referer: http://[redacted-domain]/wp-includes/txets.php
show less
Web App Attack
ππ°
20.205.136.12
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 17:55:59.504783 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 17:55:59.504783 2026] [access_compat:error] [pid 141425:tid 141425] [client 20.205.136.12:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/09/index.php, referer: binance.com[Thu Sep 17 17:56:05.470608 2026] [access_compat:error] [pid 141448:tid 141448] [client 20.205.136.12:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/08/index.php, referer: binance.com
show less
Web App Attack
πΊπΈ
155.2.215.73
17 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 155.2.215.73 - - [17/Sep/2026:17:38:42 +0000] "POST ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 155.2.215.73 - - [17/Sep/2026:17:38:42 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"155.2.215.73 - - [17/Sep/2026:17:38:43 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"155.2.215.73 - - [17/Sep/2026:17:38:43 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-" "M
show less
Hacking
Web App Attack
πΊπΈ
136.107.106.221
17 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 136.107.106.221 - - [17/Sep/2026:16:11:15 +0000] "P ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 136.107.106.221 - - [17/Sep/2026:16:11:15 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"136.107.106.221 - - [17/Sep/2026:16:11:16 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"136.107.106.221 - - [17/Sep/2026:16:11:17 +0000] "POST //xmlrpc.php HTTP/1.1" 200
show less
Hacking
Web App Attack
π±πΉ
62.60.130.150
17 Sep 2026
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-17T12:57:58.602622+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-17T12:57:58.602622+00:00 ubuntu-wp wordpress([redacted-domain])[136075]: Attempted user enumeration from 62.60.130.1502026-09-17T12:57:58.771405+00:00 ubuntu-wp wordpress([redacted-domain])[136076]: Attempted user enumeration from 62.60.130.1502026-09-17T12:57:58.987934+00:00 ubuntu-wp wordpress([redacted-domain])[136077]: Attempted user enumeration from 62.60.130.1502026-09-17T12:57:59.178913+00:00 ubuntu-wp wordpress([redacted-domain])[136078]: Attempted user enumeration from 62.60.130.1502026-09-
show less
Web App Attack
π«π·
169.58.198.242
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 12:38:04.844589 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 12:38:04.844589 2026] [access_compat:error] [pid 135336:tid 135336] [client 169.58.198.242:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/09/index.php, referer: binance.com[Thu Sep 17 12:38:10.659454 2026] [access_compat:error] [pid 135285:tid 135285] [client 169.58.198.242:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/08/index.php, referer: binance.com
show less
Web App Attack
π«π·
139.28.219.70
17 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 139.28.219.70 - - [17/Sep/2026:11:01:01 +0000] "POS ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 139.28.219.70 - - [17/Sep/2026:11:01:01 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"139.28.219.70 - - [17/Sep/2026:11:01:02 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"139.28.219.70 - - [17/Sep/2026:11:01:02 +0000] "POST //xmlrpc.php HTTP/1.1" 200 625 "-
show less
Hacking
Web App Attack
π©πͺ
138.199.19.170
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 10:55:09.459758 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 10:55:09.459758 2026] [access_compat:error] [pid 133723:tid 133723] [client 138.199.19.170:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/SimplePie/index.php[Thu Sep 17 10:55:10.141722 2026] [access_compat:error] [pid 133999:tid 133999] [client 138.199.19.170:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/Text/index.php
show less
Web App Attack
πΊπΈ
137.131.43.163
17 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 137.131.43.163 - - [17/Sep/2026:10:18:57 +0000] "PO ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 137.131.43.163 - - [17/Sep/2026:10:18:57 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"137.131.43.163 - - [17/Sep/2026:10:18:57 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5419 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"137.131.43.163 - - [17/Sep/2026:10:18:58 +0000] "POST //xmlrpc.php HTTP/1.1" 200 526
show less
Hacking
Web App Attack
π―π΅
140.238.33.49
17 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 140.238.33.49 - - [17/Sep/2026:09:08:49 +0000] "POS ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 140.238.33.49 - - [17/Sep/2026:09:08:49 +0000] "POST /wp-login.php HTTP/1.1" 401 8868 "https://[redacted-domain]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36"140.238.33.49 - - [17/Sep/2026:09:08:51 +0000] "POST /wp-login.php HTTP/1.1" 401 4074 "https://[redacted-domain]/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"140.238.33.49 - - [1
show less
Hacking
Web App Attack
π«π·
169.58.198.240
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 08:46:11.330648 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 08:46:11.330648 2026] [access_compat:error] [pid 132079:tid 132079] [client 169.58.198.240:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/09/index.php, referer: binance.com[Thu Sep 17 08:46:19.556799 2026] [access_compat:error] [pid 132077:tid 132077] [client 169.58.198.240:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/08/index.php, referer: binance.com
show less
Web App Attack
π·πΊ
2a09:bac5:5164:286e::407:43
17 Sep 2026
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-17T07:41:47.887513+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-17T07:41:47.887513+00:00 ubuntu-wp wordpress([redacted-domain])[125430]: XML-RPC authentication attempt for unknown user nixintel from 2a09:bac5:5164:286e::407:432026-09-17T07:41:57.627889+00:00 ubuntu-wp wordpress([redacted-domain])[127935]: XML-RPC authentication attempt for unknown user nixintel from 2a09:bac5:5164:286e::407:432026-09-17T07:42:08.218982+00:00 ubuntu-wp wordpress([redacted-domain])[127044]: XML-RPC authentication attempt for unknown user nixintel from 2a09:bac5:5164:286e::407:43
show less
Web App Attack
π§πͺ
34.140.86.5
17 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.140.86.5 - - [17/Sep/2026:07:24:56 +0000] "POST ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.140.86.5 - - [17/Sep/2026:07:24:56 +0000] "POST //xmlrpc.php HTTP/1.1" 200 623 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"34.140.86.5 - - [17/Sep/2026:07:24:57 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"34.140.86.5 - - [17/Sep/2026:07:24:57 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5417 "-" "Mozil
show less
Hacking
Web App Attack
π§π©
157.10.175.26
17 Sep 2026
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-17T05:37:37.815023+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-17T05:37:37.815023+00:00 ubuntu-wp wordpress(www.[redacted-domain])[122796]: Attempted user enumeration from 157.10.175.262026-09-17T05:37:38.056607+00:00 ubuntu-wp wordpress(www.[redacted-domain])[122805]: Attempted user enumeration from 157.10.175.262026-09-17T05:37:38.135621+00:00 ubuntu-wp wordpress([redacted-domain])[122826]: Attempted user enumeration from 157.10.175.262026-09-17T05:37:38.159848+00:00 ubuntu-wp wordpress([redacted-domain])[122798]: Attempted user enumeration from 157.10.175.26
show less
Web App Attack
π©πͺ
43.228.157.216
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 02:52:11.434888 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 02:52:11.434888 2026] [access_compat:error] [pid 118381:tid 118381] [client 43.228.157.216:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/hp2.php, referer: http://[redacted-domain]/wp-includes/hp2.php[Thu Sep 17 02:52:59.915700 2026] [access_compat:error] [pid 118380:tid 118380] [client 43.228.157.216:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/txets.php, referer: http://[redacted-domain]/wp-includes/txets.ph
show less
Web App Attack
πΈπ¬
149.118.59.225
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 02:36:36.421819 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 02:36:36.421819 2026] [access_compat:error] [pid 117964:tid 117964] [client 149.118.59.225:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/09/index.php, referer: binance.com[Thu Sep 17 02:36:41.013878 2026] [access_compat:error] [pid 117968:tid 117968] [client 149.118.59.225:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/2026/08/index.php, referer: binance.com
show less
Web App Attack
πΈπ¬
188.166.219.177
17 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 00:16:02.737623 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Thu Sep 17 00:16:02.737623 2026] [access_compat:error] [pid 115918:tid 115918] [client 188.166.219.177:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-content/uploads/index.php[Thu Sep 17 00:16:03.360205 2026] [access_compat:error] [pid 115908:tid 115908] [client 188.166.219.177:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/index.php
show less
Web App Attack
π³π±
78.142.18.40
16 Sep 2026
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-16T23:39:03.045318+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-soft]: Web App Attack - 2026-09-16T23:39:03.045318+00:00 ubuntu-wp wordpress([redacted-domain])[115452]: Attempted user enumeration from 78.142.18.402026-09-16T23:39:03.277946+00:00 ubuntu-wp wordpress([redacted-domain])[115451]: Attempted user enumeration from 78.142.18.402026-09-16T23:39:03.891191+00:00 ubuntu-wp wordpress([redacted-domain])[115298]: Attempted user enumeration from 78.142.18.402026-09-16T23:39:04.237965+00:00 ubuntu-wp wordpress([redacted-domain])[115456]: Attempted user enumeration from 78.142.18.402026-09-16T2
show less
Web App Attack
π¬π§
31.171.130.142
16 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Wed Sep 16 21:50:20.449075 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Wed Sep 16 21:50:20.449075 2026] [access_compat:error] [pid 113701:tid 113701] [client 31.171.130.142:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/hp2.php, referer: http://[redacted-domain]/wp-includes/hp2.php[Wed Sep 16 21:51:04.141114 2026] [access_compat:error] [pid 114017:tid 114017] [client 31.171.130.142:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/txets.php, referer: http://[redacted-domain]/wp-includes/txets.ph
show less
Web App Attack
π«π·
82.102.18.118
16 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 82.102.18.118 - - [16/Sep/2026:20:03:45 +0000] "POS ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 82.102.18.118 - - [16/Sep/2026:20:03:45 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"82.102.18.118 - - [16/Sep/2026:20:03:46 +0000] "POST //xmlrpc.php HTTP/1.1" 200 624 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"82.102.18.118 - - [16/Sep/2026:20:03:46 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5418 "-
show less
Hacking
Web App Attack
π©πͺ
64.89.163.35
16 Sep 2026
Fail2Ban jail [apache-auth]: Web App Attack - [Wed Sep 16 19:52:02.535802 2026] [access_compat:error ...
show more
Fail2Ban jail [apache-auth]: Web App Attack - [Wed Sep 16 19:52:02.535802 2026] [access_compat:error] [pid 112400:tid 112400] [client 64.89.163.35:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/hp2.php, referer: http://[redacted-domain]/wp-includes/hp2.php[Wed Sep 16 19:52:33.573823 2026] [access_compat:error] [pid 112439:tid 112439] [client 64.89.163.35:0] AH01797: client denied by server configuration: /var/www/html/wordpress/wp-includes/txets.php, referer: http://[redacted-domain]/wp-includes/txets.php
show less
Web App Attack
π§π·
2804:3eb4:d22a:2c00:d557:bdcc:e056:1561
16 Sep 2026
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-16T17:44:19.605101+00:00 ubuntu-wp wordpres ...
show more
Fail2Ban jail [wordpress-hard]: Web App Attack - 2026-09-16T17:44:19.605101+00:00 ubuntu-wp wordpress([redacted-domain])[110278]: XML-RPC authentication attempt for unknown user admin from 2804:3eb4:d22a:2c00:d557:bdcc:e056:15612026-09-16T17:44:29.496931+00:00 ubuntu-wp wordpress([redacted-domain])[110456]: XML-RPC authentication attempt for unknown user admin from 2804:3eb4:d22a:2c00:d557:bdcc:e056:15612026-09-16T17:44:40.244910+00:00 ubuntu-wp wordpress([redacted-domain])[110177]: XML-RPC authentication attempt for unknown user admin from 2804:3eb4:d2
show less
Web App Attack
π±πΉ
62.60.130.230
16 Sep 2026
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 62.60.130.230 - - [16/Sep/2026:16:02:15 +0000] "POS ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 62.60.130.230 - - [16/Sep/2026:16:02:15 +0000] "POST /wp-login.php HTTP/1.1" 401 8869 "-" "Mozilla/5.0"62.60.130.230 - - [16/Sep/2026:16:02:21 +0000] "POST /wp-login.php HTTP/1.1" 401 4074 "-" "Mozilla/5.0"62.60.130.230 - - [16/Sep/2026:16:02:22 +0000] "POST /wp-login.php HTTP/1.1" 401 8868 "-" "Mozilla/5.0"62.60.130.230 - - [16/Sep/2026:16:02:28 +0000] "POST /wp-login.php HTTP/1.1" 401 8869 "-" "Mozilla/5.0"62.60.130.230 - - [16/Sep/2026:16:02:33 +0000] "POST /wp-login.php HTTP/1.1" 401 407
show less
Hacking
Web App Attack