🇬🇧
spamverify.com
2026-11-09 05:57:00
UTC ·
(6 days ago)
Honeypot Hit: WordPress Login
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇮🇪
AutosOnShow
2026-10-10 12:04:05
UTC ·
(1 month ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-10 12:03:30.058 |
Web App Attack
🇮🇪
AutosOnShow
2026-10-10 05:42:05
UTC ·
(1 month ago)
blocked for webapp attack | path requested: /.env | seen at 2026-10-10 05:41:36.852 |
Web App Attack
🇮🇹
CoreTech srl
2026-08-25 08:58:57
UTC ·
(2 months ago)
cloudlinux2 fail2ban: 2026-08-25 10:53:49,282 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 69.6.233.181 - 2026-08-25 10:53:48cloudlinux2 fail2ban: 2026-08-25 10:53:57,625 fail2ban.filter [1464]: INFO [plesk-modsecurity] ...
show more
cloudlinux2 fail2ban: 2026-08-25 10:53:49,282 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 69.6.233.181 - 2026-08-25 10:53:48cloudlinux2 fail2ban: 2026-08-25 10:53:57,625 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.27.192 - 2026-08-25 10:53:57cloudlinux2 fail2ban: 2026-08-25 10:54:00,103 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.82.50 - 2026-08-25 10:53:59cloudlinux2 fail2ban: 2026-08-25 10:53:55,279 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Unban 49.43.130.217cloudlinux2 fail2ban: 2026-08-25 10:53:58,593 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.16.245 - 2026-08-25 10:53:58cloudlinux2 fail2ban: 2026-08-25 10:54:00,897 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.88.146 - 2026-08-25 10:54:00cloudlinux2 fail2ban: 2026-08-25 10:54:02,443 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.95.20 - 2026-08-25 10:54:01cloudlinux2 fail2ban: 2026-
show less
Web App Attack
🇮🇹
CoreTech srl
2026-08-24 16:53:56
UTC ·
(2 months ago)
cloudlinux2 fail2ban: 2026-08-24 18:48:50,846 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 31.134.13.127 - 2026-08-24 18:48:49cloudlinux2 fail2ban: 2026-08-24 18:48:50,478 fail2ban.filter [1464]: INFO [plesk-wordpress] F ...
show more
cloudlinux2 fail2ban: 2026-08-24 18:48:50,846 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 31.134.13.127 - 2026-08-24 18:48:49cloudlinux2 fail2ban: 2026-08-24 18:48:50,478 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 62.204.49.39 - 2026-08-24 18:48:50cloudlinux2 fail2ban: 2026-08-24 18:50:29,352 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Unban 128.79.188.200cloudlinux2 fail2ban: 2026-08-24 18:51:11,434 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 195.63.21.66 - 2026-08-24 18:51:11cloudlinux2 fail2ban: 2026-08-24 18:51:15,074 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.68.193 - 2026-08-24 18:51:14cloudlinux2 fail2ban: 2026-08-24 18:51:15,836 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 195.63.25.138 - 2026-08-24 18:51:15cloudlinux2 fail2ban: 2026-08-24 18:51:17,138 fail2ban.filter [1464]: INFO [plesk-wordpress] Found 217.181.73.240 - 2026-08-24 18:51:16cloudlinux2 fail2ban: 2026
show less
Web App Attack
🇺🇸
cwytech
2026-08-20 04:08:42
UTC ·
(2 months ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack
🇦🇺
MAGIC
2026-03-19 00:47:24
UTC ·
(7 months ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-04 18:05:10
UTC ·
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 195.63.25.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 13:05:06.571554 2026] [security2:error] [pid 11648:tid 11648] [client 195.63.25.138:48666] M ...
show more
(mod_security) mod_security (id:225170) triggered by 195.63.25.138 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 04 13:05:06.571554 2026] [security2:error] [pid 11648:tid 11648] [client 195.63.25.138:48666] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||engineeringarts.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "engineeringarts.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aah0Uj9lBKDIgZZ3LdNX9wAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
fortypoundhead
2026-03-03 03:18:11
UTC ·
(8 months ago)
SQL Injection Attempt
SQL Injection
Web App Attack