2026-11-09 05:44:15
UTC ·
(2 days ago)
Failed Wordpress Logins
Web App Attack
🇨🇭
TheCoon
2026-11-08 10:43:11
UTC ·
(3 days ago)
Automated: Web tarpit scanner detected
Web App Attack
Hacking
🇵🇱
lns.bz
2026-11-08 07:13:46
UTC ·
(3 days ago)
Too many 404 requests [BY]
Web App Attack
🇩🇪
FeG Deutschland
2026-11-06 16:23:05
UTC ·
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇫🇮
paissangroup
2026-11-05 05:12:32
UTC ·
(6 days ago)
Multiple WAF Violations
Web App Attack
🇦🇺
Proxay Fox
2026-11-04 20:05:29
UTC ·
(6 days ago)
104.234.53.192 - - [05/Nov/2026:06:04:50 +1000] "POST /wp-login.php HTTP/2.0" 200 3325 "https://ecoflo.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" "104.2 ...
show more
104.234.53.192 - - [05/Nov/2026:06:04:50 +1000] "POST /wp-login.php HTTP/2.0" 200 3325 "https://ecoflo.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" "104.234.53.192" 568 3840 TLSv1.3/TLS_AES_256_GCM_SHA384 . acef751c750010860437c1b2899b0f79ed185fd3dcd06fbdb73cd7b6affd370e
104.234.53.192 - - [05/Nov/2026:06:04:53 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fecoflo.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/2.0" 200 3185 "https://ecoflo.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0.2" "104.234.53.192" 129 5203 TLSv1.3/TLS_AES_256_GCM_SHA384 . acef751c750010860437c1b2899b0f79ed185fd3dcd06fbdb73cd7b6affd370e
104.234.53.192 - - [05/Nov/2026:06:04:54 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fecoflo.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/2.0" 200 3185 "https://ecoflo.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win6
...
show less
Brute-Force
🇬🇧
Apache
2026-11-04 18:23:30
UTC ·
(6 days ago)
(mod_security) mod_security (id:210410) triggered by 104.234.53.192 (US/United States/-): 5 in the last 300 secs (CF_ENABLE)
Brute-Force
Web App Attack
🇩🇪
neckaralb-admin.de
2026-11-04 17:38:45
UTC ·
(6 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-11-04 11:38:38
UTC ·
(1 week ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack
🇫🇷
masterguru
2026-11-02 14:16:51
UTC ·
(1 week ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)
Hacking
🇩🇪
Marc
2026-11-02 07:38:32
UTC ·
(1 week ago)
104.234.53.192 - - [02/Nov/2026:07:20:04 +0100] "POST /wp-login.php HTTP/1.1" 200 17825 "-" "Mozilla/5.0" 104.234.53.192 - - [02/Nov/2026:08:24:44 +0100] "POST /wp-login.php HTTP/1.1" 200 17826 "-" "Mozilla/5.0" 104.234.53.192 - - [02/Nov/2026:08:24: ...
show more
104.234.53.192 - - [02/Nov/2026:07:20:04 +0100] "POST /wp-login.php HTTP/1.1" 200 17825 "-" "Mozilla/5.0" 104.234.53.192 - - [02/Nov/2026:08:24:44 +0100] "POST /wp-login.php HTTP/1.1" 200 17826 "-" "Mozilla/5.0" 104.234.53.192 - - [02/Nov/2026:08:24:59 +0100] "POST /wp-login.php HTTP/1.1" 200 15039 "-" "Mozilla/5.0" 104.234.53.192 - - [02/Nov/2026:08:30:50 +0100] "POST /wp-login.php HTTP/1.1" 200 15040 "-" "Mozilla/5.0" 104.234.53.192 - - [02/Nov/2026:08:38:31 +0100] "POST /wp-login.php HTTP/1.1" 200 15038 "-" "Mozilla/5.0"
show less
Brute-Force
Web App Attack
🇨🇭
jebla.ch
2026-11-02 04:00:58
UTC ·
(1 week ago)
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-11-02 03:58 UTC.
Web App Attack
🇵🇱
Budyn
2026-11-01 06:03:46
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: sweetpuddingtrap.xyz | Path: /wp-admin/style.php | User-Agent: Go-http-client/2.0 | Request: [Empty / GE ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: sweetpuddingtrap.xyz | Path: /wp-admin/style.php | User-Agent: Go-http-client/2.0 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-11-01 05:37:38
UTC ·
(1 week ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
iwle
2026-11-01 00:41:22
UTC ·
(1 week ago)
[Sat Oct 31 20:41:19.223514 2026] [:error] [pid 1596:tid 1710] [client 104.234.53.192:0] [client 104.234.53.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/|$)|wp-content(?:/|$)|wp-includes(?:/|$)|wp-login ...
show more
[Sat Oct 31 20:41:19.223514 2026] [:error] [pid 1596:tid 1710] [client 104.234.53.192:0] [client 104.234.53.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/|$)|wp-content(?:/|$)|wp-includes(?:/|$)|wp-login\\\\.php$|wp-editor\\\\.php$|wp-mail\\\\.php$|xmlrpc\\\\.php$)" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "152"] [id "100114"] [msg "Local Policy: WordPress probe on non-WordPress site"] [severity "WARNING"] [tag "local/wordpress-probe"] [hostname "uvscards.com"] [uri "/wp-content/style.php"] [unique_id "auaKryfBStlD_60pilv1IQAAAIw"], referer: http://uvscards.com/wp-content/style.php
[Sat Oct 31 20:41:19.951519 2026] [:error] [pid 6076:tid 6107] [client 104.234.53.192:0] [client 104.234.53.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/|$)|wp-content(?:/|$)|wp-includes(?:/|$)|wp-login\\\\.php$|wp-editor\\\\.php$|wp-mail\\\\.php$|xmlrpc\\\\.php$)" at
...
show less
Bad Web Bot
Web App Attack
