🇩🇪
LRob.fr
2026-05-16 23:30:08
(2 weeks ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇨🇭
4server
2026-05-16 20:59:32
(2 weeks ago)
[SatMay1622:59:26.6939152026][security2:error][pid2931337:tid2931409][client166.88.96.13:0]ModSecuri ...
show more
[SatMay1622:59:26.6939152026][security2:error][pid2931337:tid2931409][client166.88.96.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\^/wp-content/plugins/[\^/] /\(readme\\\\\\\\.txt\|changelog\\\\\\\\.txt\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"381\"][id\"960828\"][msg\"WordPresspluginenumerationblocked\"][hostname\"support-ticino.ch\"][uri\"/wp-content/plugins/burst-statistics/readme.txt\"][unique_id\"agjart3bXBXcB5PAHcFR8AAAAIY\"]
show less
Hacking
Web App Attack
🇷🇺
DZBOT
2026-05-16 14:14:31
(2 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-05-16 10:05:24
(2 weeks ago)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-05-16 04:08:27
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
etu brutus
2026-05-16 01:41:28
(2 weeks ago)
166.88.96.13 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇳🇱
holos.pt
2026-05-15 23:20:01
(2 weeks ago)
Blocked for Readme.txt and debug.log scans in query string: /wp-content/plugins/burst-statistics/rea ...
show more
Blocked for Readme.txt and debug.log scans in query string: /wp-content/plugins/burst-statistics/readme.txt
show less
Web App Attack
🇫🇷
dynamix
2026-05-15 20:19:54
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
conseilgouz
2026-05-15 20:04:24
(2 weeks ago)
coe-7 : Trying access unauthorized files/dir=>/wp-content/plugins/burst-statistics/readme.txt
Hacking
🇺🇸
TPI-Abuse
2026-05-15 01:26:17
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 166.88.96.13 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 166.88.96.13 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 21:26:11.851995 2026] [security2:error] [pid 12116:tid 12116] [client 166.88.96.13:54892] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||famagustacyprus.eu|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "famagustacyprus.eu"] [uri "/wp-json/wp/v2/users"] [unique_id "agZ2My33Mt-dSWcotcdkPQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-05-14 15:10:03
(3 weeks ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇬🇧
poundawebsiteltd
2026-05-14 15:01:39
(3 weeks ago)
WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 166.88.96.13 - - [14/May/2026:16:01:28 +0100] PO ...
show more
WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 166.88.96.13 - - [14/May/2026:16:01:28 +0100] POST /xmlrpc.php HTTP/1.1 503 22274 - Mozilla/5.0
show less
Web App Attack
🇩🇪
LRob.fr
2026-05-14 14:30:03
(3 weeks ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇫🇷
dynamix
2026-05-14 13:41:11
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇵🇰
sbk97 (https://sayor.net)
2026-05-12 08:11:16
(3 weeks ago)
HTTP attacks observed: GET /images/ HTTP/1.1 | status=301 || GET /assets/ HTTP/1.1 | status=301 || G ...
show more
HTTP attacks observed: GET /images/ HTTP/1.1 | status=301 || GET /assets/ HTTP/1.1 | status=301 || GET /.well-known/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2026/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2025/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2024/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2023/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2022/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2021/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2020/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2019/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2018/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2017/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2026/01/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2025/01/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2024/01/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2026/12/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2025/12/ HTTP/1.1 | status=301 || GET /wp-content/uploads/2024/12/ HTTP/1.1
show less
Brute-Force