🇹🇷
neron
2026-08-07 03:37:17
(1 week ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇨🇭
backslash
2026-07-22 14:12:01
(3 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇭
Origon
2026-07-14 18:14:57
(1 month ago)
http-backdoors-attempts - IP: 45.91.23.83 - time="2026-07-14T20:14:57+02:00" level=info msg="(555f6 ...
show more
http-backdoors-attempts - IP: 45.91.23.83 - time="2026-07-14T20:14:57+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-backdoors-attempts by ip 45.91.23.83 (CA/212238) : 4h ban on Ip 45.91.23.83" module=db
show less
Web App Attack
🇩🇪
IVski
2026-07-13 05:09:19
(1 month ago)
IVski WAF | WordPress scanner detected - probing wp-content, xmlrpc or wp-login
Port Scan
Brute-Force
Web App Attack
🇫🇷
matthieul.dev
2026-07-08 07:25:43
(1 month ago)
Blocked by os-abuseipdb; 9 hits, proto=tcp,udp, ports=54830
Port Scan
Brute-Force
2026-06-23 07:28:25
(1 month ago)
[Tue Jun 23 07:28:22.420429 2026] [proxy_fcgi:error] [pid 844941:tid 844941] [client 45.91.23.83:395 ...
show more
[Tue Jun 23 07:28:22.420429 2026] [proxy_fcgi:error] [pid 844941:tid 844941] [client 45.91.23.83:39537] AH01071: Got error 'Primary script unknown', referer: http://alien.net.au/4PJcpMFsD8B.php
[Tue Jun 23 07:28:23.132468 2026] [proxy_fcgi:error] [pid 844941:tid 844941] [client 45.91.23.83:39537] AH01071: Got error 'Primary script unknown', referer: http://alien.net.au/3PJcpMFsD8B.php
[Tue Jun 23 07:28:23.836276 2026] [proxy_fcgi:error] [pid 844941:tid 844941] [client 45.91.23.83:39537] AH01071: Got error 'Primary script unknown', referer: http://alien.net.au/5PJcpMFsD8B.php
[Tue Jun 23 07:28:24.537031 2026] [proxy_fcgi:error] [pid 844941:tid 844941] [client 45.91.23.83:39537] AH01071: Got error 'Primary script unknown', referer: http://alien.net.au/dropdown.php
[Tue Jun 23 07:28:25.243218 2026] [proxy_fcgi:error] [pid 844941:tid 844941] [client 45.91.23.83:39537] AH01071: Got error 'Primary script unknown', referer: http://alien.net.au/wp-admin.php
...
show less
Hacking
🇩🇪
Vegascosmetics
2026-06-23 06:57:28
(1 month ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after PHP/webshell probe. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇪🇸
pipeline.es
2026-06-18 16:35:39
(2 months ago)
Web scanning / probing for vulnerable paths | URL: /wp-includes/js/index.php | Evidence: 45.91.23.83 ...
show more
Web scanning / probing for vulnerable paths | URL: /wp-includes/js/index.php | Evidence: 45.91.23.83 - - [18/Jun/2026:18:33:33 +0200] \"GET /wp-includes/js/index.php HTTP/1.1\" 404 16 \"-\" \"Go-http-client/1.1\" GEOIP_COUNTRY_CODE=CA | ASN: Datacamp Limited | Country: CA
show less
Port Scan
Web App Attack
🇫🇷
dynamix
2026-06-16 16:13:35
(2 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇦🇺
aranguren.org
2026-06-05 05:49:19
(2 months ago)
45.91.23.83 - - [05/Jun/2026:15:49:17 +1000] "GET /autoload_classmap/function.php HTTP/1.1" 404 995 ...
show more
45.91.23.83 - - [05/Jun/2026:15:49:17 +1000] "GET /autoload_classmap/function.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36"
45.91.23.83 - - [05/Jun/2026:15:49:17 +1000] "GET /wp-includes/item.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3"
45.91.23.83 - - [05/Jun/2026:15:49:17 +1000] "GET /assets/index.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0"
45.91.23.83 - - [05/Jun/2026:15:49:18 +1000] "GET /.well-known/pki-validation/index.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko"
45.91.23.83 - - [05/Jun/2026:15:49:18 +1000] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 995 "-" "Mozilla/5.0 (Windows NT 10
...
show less
Bad Web Bot
🇳🇱
Site.eu
2026-06-04 21:47:12
(2 months ago)
Excessive multi-domain requests
Brute-Force
2026-06-02 19:48:32
(2 months ago)
Multiple, malicious web requests detected
Port Scan
Hacking
🇺🇸
Major Hostility
2026-06-01 15:44:59
(2 months ago)
"GET /wp-includes/ID3/wp-work.php HTTP/1.1" 404
"GET /alfa.php HTTP/1.1" 404
"GET /wp-admin/css/colo ...
show more
"GET /wp-includes/ID3/wp-work.php HTTP/1.1" 404
"GET /alfa.php HTTP/1.1" 404
"GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 404
"GET /wp-includes/click.php HTTP/1.1" 404
"GET /.well-known/wp-conflg.php HTTP/1.1" 404
"GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 404
"GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 404
"GET /wp-includes/random_compat/chosen.php HTTP/1.1" 404
"GET /wp-admin/index.php HTTP/1.1" 404
"GET /edit.php HTTP/1.1" 404
"GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 404
"GET /cgi-bin/autoload_classmap.php HTTP/1.1" 404
"GET /wp-links-opml.php HTTP/1.1" 404
"GET /wp-admin/user/network.php HTTP/1.1" 404
"GET /atomlib.php HTTP/1.1" 404
"GET /wp-includes/js%2
show less
Web App Attack
🇬🇧
Buster
2026-05-25 22:06:00
(2 months ago)
Script kiddie wordpress 1300 distributed attack attempts from Perm Blocked ASN and country
Open Proxy
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-05-23 23:46:54
(2 months ago)
Excessive multi-domain requests
Brute-Force