🇱🇻
garmtech.com
2026-08-01 00:55:10
(2 minutes ago)
Attempted access to sensitive endpoint (/wp-content/themes/seotheme/mar.php) detected. Automated sca ...
show more
Attempted access to sensitive endpoint (/wp-content/themes/seotheme/mar.php) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇮🇹
ciccio diddo
2026-08-01 00:49:34
(8 minutes ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇺🇸
entangled_mongoose
2026-08-01 00:46:29
(11 minutes ago)
Probed /wp-includes/rest-api/.
Web App Attack
🇩🇪
AetherFox
2026-08-01 00:13:03
(44 minutes ago)
AetherFox VoidGuard detected: [Sat Aug 01 00:13:02.649800 2026] [authz_core:error] [pid 3735241:tid ...
show more
AetherFox VoidGuard detected: [Sat Aug 01 00:13:02.649800 2026] [authz_core:error] [pid 3735241:tid 3735257] [client 20.100.187.246:24392] AH01630: client denied by server configuration: proxy:https://[MASKED]/pDPTEa.php
[Sat Aug 01 00:13:02.696910 2026] [authz_core:error] [pid 3735241:tid 3735255] [client 20.100.187.246:24392] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-includes/blocks/file/
[Sat Aug 01 00:13:02.721938 2026] [authz_core:error] [pid 3735241:tid 3735259] [client 20.100.187.246:24392] AH01630: client denied by server configuration: proxy:https://[MASKED]/zacosmall.php
[Sat Aug 01 00:13:02.746645 2026] [authz_core:error] [pid 3735241:tid 3735260] [client 20.100.187.246:24392] AH01630: client denied by server configuration: proxy:https://[MASKED]/Util/PHP/eval-stdin.php
[Sat Aug 01 00:13:02.771810 2026] [authz_core:error] [pid 3735241:tid 3735271] [client 20.100.187.246:24392] AH01630: client denied by server co
...
show less
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-07-31 23:24:39
(1 hour ago)
2026/07/31 23:24:37 [error] 3687372#3687372: *433209199 access forbidden by rule, client: 20.100.187 ...
show more
2026/07/31 23:24:37 [error] 3687372#3687372: *433209199 access forbidden by rule, client: 20.100.187.246, server: binixo.com, request: "GET /wp-includes/rest-api/ HTTP/2.0", host: "binixo.com"
2026/07/31 23:24:37 [error] 3687372#3687372: *433209200 access forbidden by rule, client: 20.100.187.246, server: binixo.com, request: "GET /wp-content/themes/classic/inc/ HTTP/2.0", host: "binixo.com"
2026/07/31 23:24:37 [error] 3687372#3687372: *433209203 access forbidden by rule, client: 20.100.187.246, server: binixo.com, request: "GET /wp-content/plugins/akbifoe/ HTTP/2.0", host: "binixo.com"
...
show less
Web App Attack
🇺🇸
Epimetheus
2026-07-31 23:06:21
(1 hour ago)
Unauthorized access attempts:
[GET] /wp-content/themes/3klwsstn/autoload_classmap.php
[GET] /wp-con ...
show more
Unauthorized access attempts:
[GET] /wp-content/themes/3klwsstn/autoload_classmap.php
[GET] /wp-content/themes/twentythirteen/images/headers/.php
[GET] /wp-content/plugins/WordPressCore/fm.php
[GET] /wp-includes/themes/uploads/config.php
[GET] /wp-admin/network/sites.php
[GET] /wp-admin/includes/deprecated.php
[GET] /2.php
[GET] /wp-includes/blocks/post-author/
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Web App Attack
🇩🇪
Skyrider
2026-07-31 22:44:25
(2 hours ago)
crowdsecurity/http-wordpress-scan
Web App Attack
🇩🇪
febrian.de
2026-07-31 22:43:04
(2 hours ago)
Excessive HTTP(S) probing or bad web bot detected by Fail2Ban
Bad Web Bot
Web App Attack
🇩🇰
ScamAware
2026-07-31 22:38:58
(2 hours ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
🇺🇸
antlac1
2026-07-31 22:27:47
(2 hours ago)
crowdsecurity/http-crawl-non_statics
Brute-Force
Web App Attack
🇫🇷
Zundapper
2026-07-31 22:21:53
(2 hours ago)
20.100.187.246 - - [01/Aug/2026:00:21:52 +0200] "GET /wp-includes/rest-api/ HTTP/1.1" 404 178 "-" "M ...
show more
20.100.187.246 - - [01/Aug/2026:00:21:52 +0200] "GET /wp-includes/rest-api/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.100.187.246 - - [01/Aug/2026:00:21:52 +0200] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.100.187.246 - - [01/Aug/2026:00:21:52 +0200] "GET /wp-content/plugins/akbifoe/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.100.187.246 - - [01/Aug/2026:00:21:52 +0200] "GET /wp-content/plugins/elementor/modules/landing-pages/documents/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.100.187.246 - - [01/Aug/2026:00:21:53 +0200] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 404 178
...
show less
Web App Attack
Port Scan
🇧🇪
Saec
2026-07-31 22:08:05
(2 hours ago)
Jarvis auto-ban: CF honeypot path /about.php (1× on saec.me)
Port Scan
Web App Attack
🇮🇹
CoreTech srl
2026-07-31 22:03:53
(2 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇩🇪
bryth
2026-07-31 22:01:40
(2 hours ago)
Wordpress login/xmlrpc abuse (Fri Jul 31 09:44:51 PM UTC 2026)
Hacking
Web App Attack
🇺🇸
slay3r9903
2026-07-31 22:01:04
(2 hours ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot