🇮🇱
spd.co.il
2026-08-27 13:02:56
(4 hours ago)
Web application attack detected
Hacking
Web App Attack
🇹🇷
eryilmaz
2026-08-26 02:00:20
(1 day ago)
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /
Web App Attack
Hacking
🇦🇺
paulshipley.com.au
2026-08-25 20:08:05
(1 day ago)
[Wed Aug 26 06:08:04.950270 2026] [security2:error] [pid 283040] [client 192.99.32.10:46768] [client ...
show more
[Wed Aug 26 06:08:04.950270 2026] [security2:error] [pid 283040] [client 192.99.32.10:46768] [client 192.99.32.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.info"] [uri "/index.php"] [unique_id "ao32JKgqUZMGT7UNadj-4wAAABI"]
...
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-25 19:51:48
(1 day ago)
[Wed Aug 26 05:51:47.644778 2026] [security2:error] [pid 267981] [client 192.99.32.10:51868] [client ...
show more
[Wed Aug 26 05:51:47.644778 2026] [security2:error] [pid 267981] [client 192.99.32.10:51868] [client 192.99.32.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/index.php"] [unique_id "ao3yU1QdPSigblGt4KJdwwAAAAQ"]
...
show less
Web App Attack
🇭🇺
bcsaba
2026-08-25 19:40:04
(1 day ago)
Zgrab user agent:
192.99.32.10 - - [25/Aug/2026:21:40:01 +0200] "GET /index.php?rest_route=/wp/v2/us ...
show more
Zgrab user agent:
192.99.32.10 - - [25/Aug/2026:21:40:01 +0200] "GET /index.php?rest_route=/wp/v2/users HTTP/2.0" 403 146 "-" "Mozilla/5.0 zgrab/0.x"
show less
Web App Attack
2026-08-25 19:35:15
(1 day ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
2026-08-25 19:28:31
(1 day ago)
2026-08-25T19:28:30.802256+00:00 instance-20260804-1025 wordpress(netal.co)[554215]: Immediately blo ...
show more
2026-08-25T19:28:30.802256+00:00 instance-20260804-1025 wordpress(netal.co)[554215]: Immediately block connections from 192.99.32.10
...
show less
Web App Attack
2026-08-25 18:14:00
(1 day ago)
Web App Attack
🇵🇱
Budyn
2026-08-25 18:10:37
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.online | URI: /index.php?rest_route=/wp/v2/users | UA: Mozilla/5.0 zgrab/0.x | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇦🇺
paulshipley.com.au
2026-08-25 17:47:07
(1 day ago)
[Wed Aug 26 03:47:06.746945 2026] [security2:error] [pid 261733] [client 192.99.32.10:33440] [client ...
show more
[Wed Aug 26 03:47:06.746945 2026] [security2:error] [pid 261733] [client 192.99.32.10:33440] [client 192.99.32.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/index.php"] [unique_id "ao3VGmAl2Tm-gwZyAq_wUAAAAAs"], referer: https://levellapromotions.com/index.php?rest_route=/wp/v2/users
...
show less
Web App Attack
🇫🇷
_tom
2026-08-25 17:06:24
(2 days ago)
Automated report (2026-08-25T19:06:24+02:00). Scraper detected.
Bad Web Bot
Open Proxy
🇭🇺
bcsaba
2026-08-25 17:02:49
(2 days ago)
Zgrab user agent:
192.99.32.10 - - [25/Aug/2026:19:02:46 +0200] "GET /index.php?rest_route=/wp/v2/us ...
show more
Zgrab user agent:
192.99.32.10 - - [25/Aug/2026:19:02:46 +0200] "GET /index.php?rest_route=/wp/v2/users HTTP/2.0" 403 146 "-" "Mozilla/5.0 zgrab/0.x"
show less
Web App Attack
🇨🇿
ddw
2026-08-25 16:36:31
(2 days ago)
ModSecurity detection - Rules: 913100(Found User-Agent associated with security scanner)
Web App Attack
🇳🇱
Mangelot Hosting
2026-08-25 16:27:14
(2 days ago)
(bad_user_agent) srv103 Malicious Scanner 192.99.32.10 (CA/Canada/ns557061.ip-192-99-32.net): 5 in t ...
show more
(bad_user_agent) srv103 Malicious Scanner 192.99.32.10 (CA/Canada/ns557061.ip-192-99-32.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
nyt
2026-08-25 16:16:57
(2 days ago)
WP User Enumeration
Web App Attack