2026-06-10 17:14:28
(7 hours ago)
185.192.16.44 - - [10/Jun/2026:19:14:13 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 487 ...
show more
185.192.16.44 - - [10/Jun/2026:19:14:13 +0200] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0"
185.192.16.44 - - [10/Jun/2026:19:14:13 +0200] "GET /wp-includes/block-patterns/ HTTP/1.1" 404 487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0"
185.192.16.44 - - [10/Jun/2026:19:14:13 +0200] "GET /wp-includes/certificates/ HTTP/1.1" 404 487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
185.192.16.44 - - [10/Jun/2026:19:14:13 +0200] "GET /wp-content/cache/ HTTP/1.1" 404 487 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"
185.192.16.44 - - [10/Jun/2026:19:14:13 +0200] "GET /assets/images/ HTTP/1.1" 404 487 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36"
...
show less
DDoS Attack
🇫🇷
Octopuce
2026-06-10 16:15:22
(8 hours ago)
Aggressive web search of vulnerable pages: /cgi-bin/autoload_classmap.php /wp-links-opml.php /wp-adm ...
show more
Aggressive web search of vulnerable pages: /cgi-bin/autoload_classmap.php /wp-links-opml.php /wp-admin/user/network.php /atomlib.php /wp-includ ...
show less
Web App Attack
🇬🇧
consul.to
2026-06-10 12:39:28
(11 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇦
URAN Publishing Service
2026-06-08 19:04:39
(2 days ago)
185.192.16.44 - - [08/Jun/2026:22:04:38 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 4 ...
show more
185.192.16.44 - - [08/Jun/2026:22:04:38 +0300] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 404 725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36"
185.192.16.44 - - [08/Jun/2026:22:04:39 +0300] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 404 725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
...
show less
Web App Attack
2026-05-03 00:38:46
(1 month ago)
wp admin page access attempt
...
Hacking
Web App Attack
🇬🇧
consul.to
2026-04-30 00:33:28
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-04-13 19:06:11
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Site.eu
2026-04-12 14:07:39
(1 month ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-04-12 13:21:53
(1 month ago)
(mod_security) mod_security (id:240000) triggered by 185.192.16.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 185.192.16.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 09:21:50.304122 2026] [security2:error] [pid 1835471:tid 1835471] [client 185.192.16.44:57131] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||flicra140.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "flicra140.org"] [uri "/images/stories/themes.php"] [unique_id "aducbmMD41FK59GHruSlXQAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-04-08 23:38:56
(2 months ago)
Unauthorized access to webpage admin
Web App Attack
2026-03-21 03:48:22
(2 months ago)
Fail2Ban apache-noscript
Bad Web Bot
🇬🇧
consul.to
2026-03-18 15:23:38
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-03-15 02:52:06
(2 months ago)
(mod_security) mod_security (id:240000) triggered by 185.192.16.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 185.192.16.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 22:52:00.188324 2026] [security2:error] [pid 15565:tid 15565] [client 185.192.16.44:50687] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.cbmanufacturing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.cbmanufacturing.com"] [uri "/images/stories/themes.php"] [unique_id "abYe0CEnFm9LpxuuLmp8mgAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-03-03 06:01:57
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-03-03 00:58:15
(3 months ago)
Multiple WAF Violations
Web App Attack