🇨🇦
zXero
2026-09-05 07:15:49
(5 hours ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-09-03 12:28:32
(2 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇨🇦
zXero
2026-09-01 13:14:25
(3 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇺🇸
Rayulcifer
2026-09-01 06:59:43
(4 days ago)
[Fri Jul 03 23:26:58.303553 2026] [authz_core:error] [pid 2703375:tid 131153790437056] [client 20.19 ...
show more
[Fri Jul 03 23:26:58.303553 2026] [authz_core:error] [pid 2703375:tid 131153790437056] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php
[Fri Jul 03 23:26:58.418105 2026] [authz_core:error] [pid 2703375:tid 131151649826496] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php
[Fri Jul 03 23:26:58.532832 2026] [authz_core:error] [pid 2703375:tid 131151138100928] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/av.php
[Fri Jul 03 23:26:58.661161 2026] [authz_core:error] [pid 2703375:tid 131149661705920] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/adminfuns.php
[Fri Jul 03 23:26:58.775886 2026] [authz_core:error] [pid 2703375:tid 131151188457152] [client 20.195.177.9:54618] AH01630: client denie
...
show less
Brute-Force
SSH
🇨🇦
zXero
2026-08-29 03:08:31
(1 week ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇩🇪
bogdanv
2026-08-27 17:55:05
(1 week ago)
$f2bV_matches
DDoS Attack
Web Spam
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-08-27 12:39:20
(1 week ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇺🇸
Rayulcifer
2026-08-27 06:34:32
(1 week ago)
[Fri Jul 03 23:26:58.303553 2026] [authz_core:error] [pid 2703375:tid 131153790437056] [client 20.19 ...
show more
[Fri Jul 03 23:26:58.303553 2026] [authz_core:error] [pid 2703375:tid 131153790437056] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/wp-content/plugins/hellopress/wp_filemanager.php
[Fri Jul 03 23:26:58.418105 2026] [authz_core:error] [pid 2703375:tid 131151649826496] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/this_is_a_new_hello_world.php
[Fri Jul 03 23:26:58.532832 2026] [authz_core:error] [pid 2703375:tid 131151138100928] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/av.php
[Fri Jul 03 23:26:58.661161 2026] [authz_core:error] [pid 2703375:tid 131149661705920] [client 20.195.177.9:54618] AH01630: client denied by server configuration: proxy:http://localhost:4000/adminfuns.php
[Fri Jul 03 23:26:58.775886 2026] [authz_core:error] [pid 2703375:tid 131151188457152] [client 20.195.177.9:54618] AH01630: client denie
...
show less
Brute-Force
SSH
🇬🇧
myintarweb
2026-08-14 23:55:54
(3 weeks ago)
20.195.177.9 - - [02/Jul/2026:23:06:02 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager. ...
show more
20.195.177.9 - - [02/Jul/2026:23:06:02 +0100] 80 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 1664 "-" "-"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-08-13 17:02:52
(3 weeks ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇨🇦
zXero
2026-08-11 12:50:32
(3 weeks ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇧🇬
alnaasd
2026-08-10 13:14:53
(3 weeks ago)
WAF block action triggered by rule set "Information Disclosure - Common Files" (2 occurrences observ ...
show more
WAF block action triggered by rule set "Information Disclosure - Common Files" (2 occurrences observed).
show less
Web App Attack
🇳🇴
tmiland
2026-08-03 05:55:54
(1 month ago)
Detected 166 connections from 20.195.177.9 last 15 minutes.; 20.195.177.9 is part of network 20.195. ...
show more
Detected 166 connections from 20.195.177.9 last 15 minutes.; 20.195.177.9 is part of network 20.195.0.0 with 7482 distributed connections; Logs: 20.195.177.9 - - [02/Jul/2026:23:02:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /aaa.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /BDKR28WP.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /BDKR28WP.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET
show less
DDoS Attack
Bad Web Bot
Web App Attack
🇳🇴
tmiland
2026-08-03 01:13:53
(1 month ago)
Detected 166 connections from 20.195.177.9 last 15 minutes.; 20.195.177.9 is part of network 20.195. ...
show more
Detected 166 connections from 20.195.177.9 last 15 minutes.; 20.195.177.9 is part of network 20.195.0.0 with 7483 distributed connections; Logs: 20.195.177.9 - - [02/Jul/2026:23:02:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /aaa.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /BDKR28WP.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /BDKR28WP.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET
show less
DDoS Attack
Bad Web Bot
Web App Attack
🇳🇴
tmiland
2026-08-02 22:21:17
(1 month ago)
Detected 166 connections from 20.195.177.9 last 15 minutes.; 20.195.177.9 is part of network 20.195. ...
show more
Detected 166 connections from 20.195.177.9 last 15 minutes.; 20.195.177.9 is part of network 20.195.0.0 with 7480 distributed connections; Logs: 20.195.177.9 - - [02/Jul/2026:23:02:18 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:19 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /aaa.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /aaa.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /BDKR28WP.php HTTP/1.1" 301 162 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET /BDKR28WP.php HTTP/1.1" 404 2992 "-" "-" 20.195.177.9 - - [02/Jul/2026:23:02:20 +0200] "GET
show less
DDoS Attack
Bad Web Bot
Web App Attack