๐ฎ๐น
CoreTech srl
2026-09-02 07:48:57
(1 day ago)
cloudlinux2 fail2ban: 2026-09-02 09:43:59,845 fail2ban.filter [1472]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-02 09:43:59,845 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 154.159.252.11 - 2026-09-02 09:43:59cloudlinux2 fail2ban: 2026-09-02 09:44:12,877 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 185.251.19.24 - 2026-09-02 09:44:11cloudlinux2 fail2ban: 2026-09-02 09:44:32,383 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 154.159.252.11 - 2026-09-02 09:44:32cloudlinux2 fail2ban: 2026-09-02 09:44:48,403 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 165.99.41.144 - 2026-09-02 09:44:48cloudlinux2 fail2ban: 2026-09-02 09:45:05,354 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 154.159.252.11 - 2026-09-02 09:45:05cloudlinux2 fail2ban: 2026-09-02 09:45:05,669 fail2ban.filter [1472]: INFO [recidive] Found 154.159.252.11 - 2026-09-02 09:45:05cloudlinux2 fail2ban: 2026-09-02 09:45:05,662 fail2ban.actions [1472]: NOTICE [plesk-modsecurity] Ban 154.159.252.11cloudlinux2 fail2ban: 202
show less
Web App Attack
๐ฉ๐ช
LRob
2026-09-02 02:45:27
(1 day ago)
WordPress login brute-force | path: /xmlrpc.php | 2026-09-02 02:45 UTC
Brute-Force
Web App Attack
๐บ๐ธ
gui-ying233
2026-08-26 18:04:31
(1 week ago)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show more
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Bad Web Bot
๐ซ๐ท
YF
2026-08-20 03:30:43
(2 weeks ago)
xmlrpc.php Potential DDoS or brute force
DDoS Attack
Brute-Force
๐บ๐ธ
kosada.com
2026-08-19 20:26:47
(2 weeks ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
Anonymous
2026-08-19 14:21:40
(2 weeks ago)
Blocked by ModSec and CSF
Port Scan
๐ฉ๐ช
Marc
2026-08-18 10:28:50
(2 weeks ago)
165.99.41.144 - - [18/Aug/2026:12:28:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4669 "-" "WordPress.c ...
show more
165.99.41.144 - - [18/Aug/2026:12:28:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4669 "-" "WordPress.com; https://wordpress.com" 165.99.41.144 - - [18/Aug/2026:12:28:39 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4670 "-" "Jetpack/12.5; WordPress/6.1; http://site71515370.com" 165.99.41.144 - - [18/Aug/2026:12:28:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4670 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
show less
Brute-Force
Web App Attack
๐ธ๐ช
ljo
2026-08-18 08:26:49
(2 weeks ago)
165.99.41.144 - - [18/Aug/2026:10:25:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "Jetpack by ...
show more
165.99.41.144 - - [18/Aug/2026:10:25:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
165.99.41.144 - - [18/Aug/2026:10:25:23 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "Jetpack by WordPress.com"
165.99.41.144 - - [18/Aug/2026:10:25:34 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
165.99.41.144 - - [18/Aug/2026:10:25:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.3)"
165.99.41.144 - - [18/Aug/2026:10:25:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "WordPress.com; https://wordpress.com"
165.99.41.144 - - [18/Aug/2026:10:26:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
165.99.41.144 - - [18/Aug/2026:10:26:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 5243 "-" "Jetpack by WordPress.com"
165.99.41.144 - - [18/Aug/2026:10:26:27 +0200] "POST /xmlrpc.ph
...
show less
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-08-16 06:09:44
(2 weeks ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nest ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after deep/obfuscated attack (encoding nesting / CPU-drain risk). Evidence: DEEP ATTACK: Recursive currentUrl nesting detected
show less
Hacking
Exploited Host
Web App Attack
๐ณ๐ฑ
DrLex0
2026-08-15 00:40:24
(2 weeks ago)
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt an ...
show more
BnL006: Obvious dumb distributed botnet crawler stepping into honeypot trap, violating robots.txt and meta directives
165.99.41.144 443 - [15/Aug/2026:00:40:24 +0000] "GET [redacted] HTTP/1.1" 503 6158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36"
show less
Bad Web Bot
Exploited Host
๐ง๐ช
madeit
2026-08-09 04:38:23
(3 weeks ago)
Web App Attack
๐ฉ๐ช
LRob
2026-08-05 07:30:29
(4 weeks ago)
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ...
show more
CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS | req: /calendrier-2/action~agenda/time_limit~1763161200/cat_ids~549,643/tag_ids~435,573,539,614,438/request_format~json/ | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36
show less
DDoS Attack
Web App Attack