🇳🇱
Site.eu
2026-07-06 00:03:28
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇬🇧
consul.to
2026-07-05 12:19:06
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇮
YF
2026-07-05 12:00:25
(1 day ago)
Attaque distribuée subnet
DDoS Attack
Web App Attack
🇨🇭
backslash
2026-07-05 10:57:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
Lee Daniel
2026-07-05 04:57:56
(1 day ago)
185.199.157.26 - - [05/Jul/2026:00:57:53 -0400] "GET /wp-content/themes/theme-check/theme-check.php ...
show more
185.199.157.26 - - [05/Jul/2026:00:57:53 -0400] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 404 30612 "http://portstcharles.com/wp-content/themes/theme-check/theme-check.php" "Go-http-client/2.0"
185.199.157.26 - - [05/Jul/2026:00:57:53 -0400] "GET /wp-content/themes/Divi/404.php HTTP/1.1" 404 30485 "http://portstcharles.com/wp-content/themes/Divi/404.php" "Go-http-client/2.0"
185.199.157.26 - - [05/Jul/2026:00:57:54 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 404 30520 "http://portstcharles.com/wp-content/themes/bltm/wp-login.php" "Go-http-client/2.0"
185.199.157.26 - - [05/Jul/2026:00:57:55 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 30515 "http://portstcharles.com/wp-content/themes/seotheme/db.php?u" "Go-http-client/2.0"
185.199.157.26 - - [05/Jul/2026:00:57:56 -0400] "GET /wp-content/plugins/SecurityFin/SecurityFin.php HTTP/1.1" 404 30622 "http://portstcharles.com/wp-content/plugins/SecurityFin/SecurityFin.php" "Go-http-client/2.0
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-07-05 02:26:04
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24
Exploited Host
Web App Attack
🇯🇵
SentinalX by uzumaru
2026-06-01 08:04:26
(1 month ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show more
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.cyberghostvpn.com:443
show less
Open Proxy
Port Scan
2026-05-05 15:33:08
(2 months ago)
<comment>
Web App Attack
🇺🇸
rdpguard.com
2026-04-22 04:30:37
(2 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇬🇧
consul.to
2026-04-21 12:51:50
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-04-10 05:30:42
(2 months ago)
(mod_security) mod_security (id:234930) triggered by 185.199.157.26 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:234930) triggered by 185.199.157.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 01:30:33.991951 2026] [security2:error] [pid 54145:tid 54145] [client 185.199.157.26:50643] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||suswastima.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "suswastima.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "adiK-cJ6XVUg-IWOGKlGbwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-04-10 05:05:14
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-04-05 14:20:03
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Site.eu
2026-04-05 12:27:13
(3 months ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-04-05 12:17:18
(3 months ago)
(mod_security) mod_security (id:234930) triggered by 185.199.157.26 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:234930) triggered by 185.199.157.26 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 05 08:17:11.288087 2026] [security2:error] [pid 4440:tid 4443] [client 185.199.157.26:54679] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||www.worldecom.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.worldecom.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "adJSx-BcGs0Lm_JpdwwcMgAAAAE"], referer: http://worldecom.org/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php
show less
Brute-Force
Bad Web Bot
Web App Attack