🇺🇸
xxkodedxx
2026-08-06 12:21:54
(1 month ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Active: 12:21:37 UTC
Volume: 1 honeypot probe(s)
Bait taken: /wp-login.php
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-08-05 13:55:37
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2
Exploited Host
Web App Attack
🇲🇽
octageeks.com
2026-08-03 04:19:22
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇫🇷
tecnicorioja
2026-08-02 22:00:32
(1 month ago)
wp-login attack [02/Aug/2026:22:03:25
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-08-02 16:18:57
(1 month ago)
cloudlinux2 fail2ban: 2026-08-02 18:14:44,235 fail2ban.actions [1992]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-02 18:14:44,235 fail2ban.actions [1992]: NOTICE [plesk-modsecurity] Unban 34.116.76.9cloudlinux2 fail2ban: 2026-08-02 18:14:52,103 fail2ban.filter [1992]: INFO [plesk-wordpress] Found 15.235.193.207 - 2026-08-02 18:14:52cloudlinux2 fail2ban: 2026-08-02 18:15:56,713 fail2ban.filter [1992]: INFO [plesk-modsecurity] Found 34.176.187.4 - 2026-08-02 18:15:56cloudlinux2 fail2ban: 2026-08-02 18:15:56,755 fail2ban.filter [1992]: INFO [plesk-modsecurity] Found 34.176.187.4 - 2026-08-02 18:15:56cloudlinux2 fail2ban: 2026-08-02 18:15:56,722 fail2ban.filter [1992]: INFO [plesk-modsecurity] Found 34.176.187.4 - 2026-08-02 18:15:56cloudlinux2 fail2ban: 2026-08-02 18:15:56,820 fail2ban.filter [1992]: INFO [plesk-modsecurity] Found 34.176.187.4 - 2026-08-02 18:15:56cloudlinux2 fail2ban: 2026-08-02 18:15:56,796 fail2ban.filter [1992]: INFO [plesk-modsecurity] Found 34.176.187.4 - 2026-08-02 18:15:56cloudlinux2 fail2ban: 202
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-08-01 18:47:15
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇲🇽
octageeks.com
2026-07-31 04:08:07
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
ger-stg-sifi1
2026-07-29 22:50:52
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
FeG Deutschland
2026-07-29 04:46:20
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-07-27 18:12:03
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇹🇷
oalver
2026-07-27 15:14:45
(1 month ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-07-27. Risk score: 30/100.
show less
Web App Attack
🇩🇪
Hazzard
2026-07-25 17:29:37
(1 month ago)
(wordpress) Failed wordpress login from 15.235.193.207 (SG/Singapore/-/-/singapore.kencang.id/[redac ...
show more
(wordpress) Failed wordpress login from 15.235.193.207 (SG/Singapore/-/-/singapore.kencang.id/[redacted]): (CF_ENABLE)
show less
Brute-Force
🇩🇪
ger-stg-sifi1
2026-07-25 10:23:59
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 23:48:18
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 15.235.193.207 (singapore.kencang.id): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 15.235.193.207 (singapore.kencang.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 19:48:10.746503 2026] [security2:error] [pid 34022:tid 34022] [client 15.235.193.207:37244] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thorndikestudio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thorndikestudio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amAFOgkYv-cetvmUd6C_AAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 23:06:26
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 15.235.193.207 (singapore.kencang.id): 1 in the ...
show more
(mod_security) mod_security (id:225170) triggered by 15.235.193.207 (singapore.kencang.id): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 19:06:19.482644 2026] [security2:error] [pid 4844:tid 4844] [client 15.235.193.207:35456] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tradersworldmarket.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tradersworldmarket.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al_7a1Nfto3c-ZNOVNNGMAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack