🇩🇪
LRob
2026-07-12 14:28:27
(2 hours ago)
CrowdSec: lrob/wp-xmlrpc-bf | req: ["/xmlrpc.php"] | UA: ["Mozilla/5.0 (Windows NT 11.0; Win64; x64; ...
show more
CrowdSec: lrob/wp-xmlrpc-bf | req: ["/xmlrpc.php"] | UA: ["Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0","Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/
show less
Brute-Force
Web App Attack
2026-07-11 14:06:50
(1 day ago)
Trying to access config files
Web App Attack
2026-07-09 19:06:35
(2 days ago)
Trying to access config files
Web App Attack
🇺🇸
lostswordfish.com
2026-07-09 13:42:03
(3 days ago)
Wordfence waf block on wp20190711M4
Web App Attack
2026-07-08 08:44:55
(4 days ago)
2026-07-08T10:44:53.267699+02:00 aion wordpress[3136232]: Blocked authentication attempt for admin f ...
show more
2026-07-08T10:44:53.267699+02:00 aion wordpress[3136232]: Blocked authentication attempt for admin from 216.26.242.248
...
show less
Hacking
Brute-Force
🇲🇽
octageeks.com
2026-07-01 04:11:33
(1 week ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇲🇹
Malta
2026-06-29 21:11:17
(1 week ago)
216.26.242.248 - - [29/Jun/2026:23:11:17 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
216.26.242.248 - - [29/Jun/2026:23:11:17 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-06-28 18:32:54
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇲🇹
Malta
2026-06-27 18:33:09
(2 weeks ago)
216.26.242.248 - - [27/Jun/2026:20:33:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintos ...
show more
216.26.242.248 - - [27/Jun/2026:20:33:09 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0"
show less
Hacking
Web App Attack
🇫🇷
Sklurk
2026-06-07 01:04:20
(1 month ago)
Web App Attack
Web App Attack
🇺🇸
mnsf
2026-03-27 01:06:02
(3 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-01-02 22:59:41
(6 months ago)
Auto-ban: >3000 req/min op 2026-01-02
Hacking
Web App Attack
SSH
🇺🇸
TPI-Abuse
2025-11-25 05:40:52
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:40:41.091478 2025] [security2:error] [pid 12939:tid 12939] [client 216.26.242.248:42391] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.embossednapkins.com"] [uri "/.svn/wc.db"] [unique_id "aSVBWW_74S_ZINxusmXj_gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 05:24:38
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:24:31.595698 2025] [security2:error] [pid 478:tid 478] [client 216.26.242.248:21045] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dailybeautysupply.com"] [uri "/.git/HEAD"] [unique_id "aSU9j_6pBuENExljZTiohwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-25 03:52:36
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 216.26.242.248 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 216.26.242.248 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:52:29.865946 2025] [security2:error] [pid 2236:tid 2236] [client 216.26.242.248:19569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.glentraeger.com"] [uri "/.env"] [unique_id "aSUn_Q4B8SVu9Szq5a6xnAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack