๐จ๐ฆ
zXero
2026-10-15 12:09:22
(8 hours ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
๐ง๐ท
Peregrine
2026-10-15 03:13:25
(17 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 158.23.176.177 162.159.104.111 - - [10/Oct/2026:05: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 158.23.176.177 162.159.104.111 - - [10/Oct/2026:05:34:54 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193
show less
Bad Web Bot
Anonymous
2026-10-14 20:23:16
(1 day ago)
fail2ban: apache-auth jail (3 hits in 2419200s)
Brute-Force
Web App Attack
๐ฉ๐ช
rh24
2026-10-14 17:00:04
(1 day ago)
HTTP flood or excessive requests, blocked by host firewall.
DDoS Attack
Web App Attack
๐บ๐ธ
Rayulcifer
2026-10-14 14:48:09
(1 day ago)
[Mon Oct 05 14:02:52.366182 2026] [authz_core:error] [pid 813872:tid 140444113544896] [client 158.23 ...
show more
[Mon Oct 05 14:02:52.366182 2026] [authz_core:error] [pid 813872:tid 140444113544896] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php
[Mon Oct 05 14:02:52.422293 2026] [authz_core:error] [pid 813872:tid 140444801418944] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php
[Mon Oct 05 14:02:52.519646 2026] [authz_core:error] [pid 813872:tid 140447202035392] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/3PJcpMFsD8B.php
[Mon Oct 05 14:02:52.575613 2026] [authz_core:error] [pid 813872:tid 140444776240832] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/aa.php
[Mon Oct 05 14:02:52.642752 2026] [authz_core:error] [pid 813872:tid 140446814684864] [client 158.23.176.177:3328] AH01630: client den
...
show less
Brute-Force
SSH
๐ฉ๐ช
Holger
2026-10-14 06:16:47
(1 day ago)
WordPress WebAttack
Brute-Force
Web App Attack
๐ฉ๐ช
rh24
2026-10-13 17:00:03
(2 days ago)
HTTP flood or excessive requests, blocked by host firewall.
DDoS Attack
Web App Attack
๐บ๐ธ
Rayulcifer
2026-10-13 14:20:18
(2 days ago)
[Mon Oct 05 14:02:52.366182 2026] [authz_core:error] [pid 813872:tid 140444113544896] [client 158.23 ...
show more
[Mon Oct 05 14:02:52.366182 2026] [authz_core:error] [pid 813872:tid 140444113544896] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php
[Mon Oct 05 14:02:52.422293 2026] [authz_core:error] [pid 813872:tid 140444801418944] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php
[Mon Oct 05 14:02:52.519646 2026] [authz_core:error] [pid 813872:tid 140447202035392] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/3PJcpMFsD8B.php
[Mon Oct 05 14:02:52.575613 2026] [authz_core:error] [pid 813872:tid 140444776240832] [client 158.23.176.177:3328] AH01630: client denied by server configuration: proxy:http://localhost:4000/aa.php
[Mon Oct 05 14:02:52.642752 2026] [authz_core:error] [pid 813872:tid 140446814684864] [client 158.23.176.177:3328] AH01630: client den
...
show less
Brute-Force
SSH
Anonymous
2026-10-13 09:17:52
(2 days ago)
FortiWeb WAF: 342 attacks detected. Threat Score: 188400. Types: Client Management(171), Block IP Li ...
show more
FortiWeb WAF: 342 attacks detected. Threat Score: 188400. Types: Client Management(171), Block IP List(171). Origin: Mexico.
show less
Web App Attack
๐ฐ๐ท
MW
2026-10-13 08:31:55
(2 days ago)
158.23.176.177 - - [11/Oct/2026:01:07:21 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
158.23.176.177 - - [11/Oct/2026:01:07:21 +0900] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5720 "-" "-"
158.23.176.177 - - [11/Oct/2026:01:07:21 +0900] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 459 "-" "-"
158.23.176.177 - - [11/Oct/2026:01:07:21 +0900] "GET /f5.php HTTP/1.1" 404 459 "-" "-"
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-10-13 05:16:31
(2 days ago)
19 attacks on PHP URLs:
GET /222.php HTTP/1.1
Web App Attack
๐บ๐ธ
Rayulcifer
2026-10-13 03:21:54
(2 days ago)
[Wed Oct 07 16:45:08.844232 2026] [access_compat:error] [pid 2023214:tid 134180767766208] [client 15 ...
show more
[Wed Oct 07 16:45:08.844232 2026] [access_compat:error] [pid 2023214:tid 134180767766208] [client 158.23.176.177:18244] AH01797: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php
[Wed Oct 07 16:45:08.898022 2026] [access_compat:error] [pid 2023214:tid 134180801337024] [client 158.23.176.177:18244] AH01797: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php
[Wed Oct 07 16:45:08.954469 2026] [access_compat:error] [pid 2023214:tid 134181908616896] [client 158.23.176.177:18244] AH01797: client denied by server configuration: proxy:http://localhost:4000/tesla.php
[Wed Oct 07 16:45:09.022221 2026] [access_compat:error] [pid 2023214:tid 134182177568448] [client 158.23.176.177:18244] AH01797: client denied by server configuration: proxy:http://localhost:4000/zoo2.php
[Wed Oct 07 16:45:09.255793 2026] [access_compat:error] [pid 2023214:tid 134180633548480] [client 158.23.176.177:18244
...
show less
Brute-Force
SSH
๐ง๐ท
Peregrine
2026-10-13 03:13:19
(2 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 158.23.176.177 162.159.104.111 - - [10/Oct/2026:05: ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 158.23.176.177 162.159.104.111 - - [10/Oct/2026:05:34:54 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ซ๐ท
tecnicorioja
2026-10-12 22:01:17
(2 days ago)
wp-login attack [12/Oct/2026:11:54:20
Brute-Force
Web App Attack
๐ฉ๐ช
Manuel Braeuer
2026-10-12 19:14:14
(3 days ago)
158.23.176.177 - - [12/Oct/2026:21:14:12 +0200] "GET /bnmtp.php HTTP/1.1" 403 5610 "-" "-"
158.23.17 ...
show more
158.23.176.177 - - [12/Oct/2026:21:14:12 +0200] "GET /bnmtp.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:12 +0200] "GET /or.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:13 +0200] "GET /date1.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:13 +0200] "GET /opsh.php HTTP/1.1" 403 5610 "-" "-"
158.23.176.177 - - [12/Oct/2026:21:14:13 +0200] "GET /kgb.php HTTP/1.1" 403 5610 "-" "-"
...
show less
Web App Attack