๐น๐ท
neron
2026-08-01 20:14:10
(15 hours ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
Anonymous
2026-07-21 21:15:33
(1 week ago)
Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-21 21:06:20
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ช๐ธ
masterguru
2026-07-21 07:23:20
(1 week ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)
Web App Attack
๐ฉ๐ช
todix
2026-07-21 00:18:29
(1 week ago)
Wordpress brute force or spam attempt from 98.159.37.99
Brute-Force
๐ซ๐ท
SpaceHost-Server
2026-07-17 22:36:33
(2 weeks ago)
Brute-Force
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-17 16:09:52
(2 weeks ago)
cloudlinux2 fail2ban: 2026-07-17 18:03:47,516 fail2ban.filter [1598]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-07-17 18:03:47,516 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 151.245.90.29 - 2026-07-17 18:03:47cloudlinux2 fail2ban: 2026-07-17 18:04:34,029 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 43.161.249.129 - 2026-07-17 18:04:34cloudlinux2 fail2ban: 2026-07-17 18:04:54,696 fail2ban.filter [1598]: INFO [recidive] Found 43.161.249.129 - 2026-07-17 18:04:54cloudlinux2 fail2ban: 2026-07-17 18:04:54,102 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 43.161.249.129 - 2026-07-17 18:04:54cloudlinux2 fail2ban: 2026-07-17 18:04:54,500 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 43.161.249.129 - 2026-07-17 18:04:54cloudlinux2 fail2ban: 2026-07-17 18:04:54,694 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Ban 43.161.249.129cloudlinux2 fail2ban: 2026-07-17 18:05:04,376 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 98.159.37.99 - 2026-07-17 18:05:04cloudlinux2 fail2ban: 2026
show less
Web App Attack
๐ซ๐ฎ
Rexikon
2026-07-16 23:59:35
(2 weeks ago)
98.159.37.99 - - [17/Jul/2026:01:57:17 +0200] "POST /wp-login.php HTTP/1.1" 200 18491 "-" "Mozilla/5 ...
show more
98.159.37.99 - - [17/Jul/2026:01:57:17 +0200] "POST /wp-login.php HTTP/1.1" 200 18491 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
98.159.37.99 - - [17/Jul/2026:01:57:51 +0200] "POST /wp-login.php HTTP/1.1" 200 18491 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
98.159.37.99 - - [17/Jul/2026:01:58:27 +0200] "POST /wp-login.php HTTP/1.1" 200 18523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
98.159.37.99 - - [17/Jul/2026:01:59:00 +0200] "POST /wp-login.php HTTP/1.1" 200 18507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
98.159.37.99 - - [17/Jul/2026:01:59:31 +0200] "POST /wp-login.php HTTP/1.1" 200 18507 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
...
show less
Brute-Force
๐ช๐ธ
masterguru
2026-07-15 09:36:05
(2 weeks ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-07-12 04:22:36
(3 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
๐ฉ๐ช
todix
2026-07-11 23:46:37
(3 weeks ago)
Wordpress brute force or spam attempt from 98.159.37.99
Brute-Force
๐บ๐ธ
OceanTreasure
2026-07-11 17:17:22
(3 weeks ago)
tcp/443; WordPress login page access attempt: "GET /wp-login.php" @ 2026-07-11T17:11:59Z [proxy]
Brute-Force
๐ฉ๐ช
neckaralb-admin.de
2026-07-10 06:51:18
(3 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-07-10 06:47:44
(3 weeks ago)
[server.techsupportltd.gr] httpd-xmlrpc-post: sites=www.protogerosparts.gr,www.wavedancercyprus.com, ...
show more
[server.techsupportltd.gr] httpd-xmlrpc-post: sites=www.protogerosparts.gr,www.wavedancercyprus.com,www.yalotechnikiamarousiou.gr; logs=/var/log/httpd/domains/protogerosparts.gr.log,/var/log/httpd/domains/wavedancercyprus.com.log,/var/log/httpd/domains/yalotech.gr.log; samples=//xmlrpc.php
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-10 05:24:09
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 98.159.37.99 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 98.159.37.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 01:24:04.726638 2026] [security2:error] [pid 445:tid 445] [client 98.159.37.99:36957] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.letmespeakpodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.letmespeakpodcast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alCB9NyvFa8T5FTO8Z11DwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack