🇩🇪
LRob
2026-10-08 14:35:44
(2 weeks ago)
Web exploit attempt | method: GET | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleW ...
show more
Web exploit attempt | method: GET | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15
show less
Hacking
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-08 11:07:06
(2 weeks ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪
thesimonmanuel
2026-10-08 09:48:54
(2 weeks ago)
167.99.66.41 - - [08/Oct/2026:15:18:53 +0530] "GET /license.txt HTTP/1.1" 301 162 "-" "python-reques ...
show more
167.99.66.41 - - [08/Oct/2026:15:18:53 +0530] "GET /license.txt HTTP/1.1" 301 162 "-" "python-requests/2.27.1"
show less
Web App Attack
🇵🇱
Budyn
2026-10-08 06:29:51
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: h.budyn.ovh | URI: /license.txt | UA: python-requests/2.27.1 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇫🇮
YF
2026-10-08 01:00:28
(2 weeks ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇧🇪
cmbplf
2026-10-07 18:45:07
(2 weeks ago)
3.391 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-07 14:20:57
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 167.99.66.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.66.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 10:20:50.130924 2026] [security2:error] [pid 11727:tid 11727] [client 167.99.66.41:58157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||chaire-construction-4-0.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chaire-construction-4-0.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asZVQv9QP0H9Bxs0C8r-RQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
YF
2026-10-07 11:00:32
(2 weeks ago)
Python requests scanner
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 22:19:28
(2 weeks ago)
(mod_security) mod_security (id:225170) triggered by 167.99.66.41 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 167.99.66.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 18:19:22.720287 2026] [security2:error] [pid 1984:tid 1984] [client 167.99.66.41:52968] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||casaluzislamujeres.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "casaluzislamujeres.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asVz6nylSUOjZNwd-AIJ-QAAAAM"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-06 21:45:18
(2 weeks ago)
Web attack blocked by Wordfence on cuypersinvalkenburg.nl (13 hits). Reported by CRMON.
Web App Attack
🇮🇹
Progetto1
2026-10-06 21:30:03
(2 weeks ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
FeG Deutschland
2026-10-06 20:43:04
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
🇳🇿
Tripwire
2026-10-06 07:40:28
(3 weeks ago)
Scanning for exploits - /license.txt
Web App Attack
2026-10-06 07:14:43
(3 weeks ago)
Attempted access to sensitive endpoint (/license.txt) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/license.txt) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇫🇷
dynamix
2025-10-25 10:42:13
(1 year ago)
Multiple WAF Violations
Web App Attack