๐ฉ๐ช
FeG Deutschland
2026-07-19 01:32:02
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-17 21:18:57
(1 week ago)
cloudlinux2 fail2ban: 2026-07-17 23:15:43,076 fail2ban.actions [1598]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-07-17 23:15:43,076 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Unban 86.98.119.172cloudlinux2 fail2ban: 2026-07-17 23:15:51,874 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 216.73.161.232 - 2026-07-17 23:15:50cloudlinux2 fail2ban: 2026-07-17 23:15:51,879 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 45.8.19.4 - 2026-07-17 23:15:50cloudlinux2 fail2ban: 2026-07-17 23:15:51,854 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 45.8.19.12 - 2026-07-17 23:15:50cloudlinux2 fail2ban: 2026-07-17 23:15:51,789 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 45.8.19.9 - 2026-07-17 23:15:50cloudlinux2 fail2ban: 2026-07-17 23:16:54,613 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 45.150.79.142 - 2026-07-17 23:16:53cloudlinux2 fail2ban: 2026-07-17 23:17:47,663 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 104.234.53.85 - 2026-07-17 23:17:47cloudlinux2 fail2ban: 2026-07-17 23:17:
show less
Web App Attack
๐ฌ๐ง
gigatech
2026-07-16 21:45:03
(1 week ago)
Webserver Probing
Web App Attack
๐ซ๐ท
Baking333
2026-07-15 22:38:13
(1 week ago)
[redacted] 45.8.19.12 - - [15/Jul/2026:23:38:09 +0100] "GET /[redacted] HTTP/1.1" 302 6803 0/69309 " ...
show more
[redacted] 45.8.19.12 - - [15/Jul/2026:23:38:09 +0100] "GET /[redacted] HTTP/1.1" 302 6803 0/69309 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" [redacted] 45.8.19.12 - - [15/Jul/2026:23:38:12 +0100] "GET /wp-admin/ HTTP/1.1" 301 630 0/311 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-07-15 21:18:48
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-15 08:18:56
(1 week ago)
cloudlinux2 fail2ban: 2026-07-15 10:14:12,488 fail2ban.filter [1812]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-15 10:14:12,488 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.218.15 - 2026-07-15 10:14:11cloudlinux2 fail2ban: 2026-07-15 10:15:42,742 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 185.251.19.32 - 2026-07-15 10:15:42cloudlinux2 fail2ban: 2026-07-15 10:15:38,497 fail2ban.filter [1812]: INFO [plesk-proftpd] Found 209.99.189.24 - 2026-07-15 10:15:38cloudlinux2 fail2ban: 2026-07-15 10:15:47,519 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 185.251.19.32 - 2026-07-15 10:15:47cloudlinux2 fail2ban: 2026-07-15 10:15:59,330 fail2ban.filter [1812]: INFO [plesk-proftpd] Found 209.99.189.24 - 2026-07-15 10:15:59cloudlinux2 fail2ban: 2026-07-15 10:16:31,253 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.8.19.12 - 2026-07-15 10:16:30cloudlinux2 fail2ban: 2026-07-15 10:17:15,955 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 209.87.169.36 - 2026-07-15 10:17:15cloudlinux2 fai
show less
SSH
Web App Attack
Open Proxy
๐ฎ๐น
CoreTech srl
2026-07-15 02:13:57
(1 week ago)
cloudlinux2 fail2ban: 2026-07-15 04:09:46,233 fail2ban.filter [1878]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-07-15 04:09:46,233 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 95.181.238.18 - 2026-07-15 04:09:46cloudlinux2 fail2ban: 2026-07-15 04:09:45,519 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 95.181.238.18 - 2026-07-15 04:09:45cloudlinux2 fail2ban: 2026-07-15 04:09:58,573 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 95.181.238.18 - 2026-07-15 04:09:58cloudlinux2 fail2ban: 2026-07-15 04:09:58,880 fail2ban.filter [1878]: INFO [recidive] Found 95.181.238.18 - 2026-07-15 04:09:58cloudlinux2 fail2ban: 2026-07-15 04:09:58,562 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 95.181.238.18 - 2026-07-15 04:09:58cloudlinux2 fail2ban: 2026-07-15 04:09:58,878 fail2ban.actions [1878]: NOTICE [plesk-modsecurity] Ban 95.181.238.18cloudlinux2 fail2ban: 2026-07-15 04:10:33,387 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 183.212.69.52 - 2026-07-15 04:10:32cloudlinux2 fail2ban: 2026-0
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-08 06:45:35
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
Anonymous
2026-07-01 01:35:10
(3 weeks ago)
Attac
Brute-Force
๐ณ๐ฑ
Site.eu
2026-06-30 05:29:41
(3 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
wordpresshosting.solutions
2026-06-28 15:49:01
(3 weeks ago)
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 45.8.19.12 - - [28/Jun/2026:15: ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 45.8.19.12 - - [28/Jun/2026:15:48:57 +0000] "GET /wp-login.php HTTP/1.1" 200 6942 "" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
45.8.19.12 - - [28/Jun/2026:15:49:01 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2F[DOMAIN]%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 9001 "https://wordpress.org/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0"
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-06-28 15:18:00
(3 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-06-28 07:20:18
(3 weeks ago)
Web attack blocked by Wordfence on kunstkringhenrijonas.nl (2 hits). Reported by CRMON.
Web App Attack
๐ณ๐ฑ
Site.eu
2026-06-27 06:16:15
(4 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐จ๐ฆ
KIsmay
2026-06-27 01:14:29
(4 weeks ago)
Jun 26 18:23:57 www4 WPAudit[3291675]: 45.8.19.12 hvrhaulers.com "Mozilla/5.0 (Macintosh; Intel Mac ...
show more
Jun 26 18:23:57 www4 WPAudit[3291675]: 45.8.19.12 hvrhaulers.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" sbd-admin:sbd-admin123 FAIL
Jun 26 19:20:32 www4 WPAudit[3295678]: 45.8.19.12 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" servicesfyi:password FAIL
Jun 26 20:45:01 www4 WPAudit[3301297]: 45.8.19.12 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" servicesfyi:servicesfyi01 FAIL
Jun 26 21:11:51 www4 WPAudit[3303935]: 45.8.19.12 www.amandasrestaurant.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" sbd-admin:user%02 FAIL
Jun 26 21:14:27 www4 WPAudit[3304059]: 45.8.19.12 www.servicesfyi.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" servicesfy:user%02 FAIL
...
show less
Brute-Force
Web App Attack