🇲🇽
octageeks.com
2026-07-20 04:12:15
(4 hours ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇳🇿
Antinson
2026-07-19 13:28:09
(19 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇩🇪
maxpower
2026-07-19 13:07:54
(19 hours ago)
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 34.46.122.21 (US/United States/21.122.46.34.bc ...
show more
(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 34.46.122.21 (US/United States/21.122.46.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.46.122.21 - - [19/Jul/2026:15:07:48 +0200] "GET /wp-json/wp/v2/users/ HTTP/1.1" 200 6818 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" host=gabriellaciammaichella.com
show less
Port Scan
🇫🇷
mail.avx.gr
2026-07-19 13:04:42
(19 hours ago)
Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 34.46.122.21 - - [19/Jul/2026:16:04:41 +0300] "GET ...
show more
Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 34.46.122.21 - - [19/Jul/2026:16:04:41 +0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Web App Attack
🇳🇱
Site.eu
2026-07-19 12:45:28
(20 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇷
masterguru
2026-07-19 12:36:31
(20 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
2026-07-19 12:23:18
(20 hours ago)
[server.tmg.gr] httpd-suspicious-path: sites=www.example.com; logs=/var/log/httpd/access_log; sample ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/wp-includes/ID3/license.txt | /blog/wp-includes/wlwmanifest.xml | /web/wp-includes/wlwmanifest.xml
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 12:18:16
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.46.122.21 (21.122.46.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.46.122.21 (21.122.46.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 08:18:08.872212 2026] [security2:error] [pid 25130:tid 25130] [client 34.46.122.21:56693] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.ftiptondds.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ftiptondds.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alzAgNqT_JkhCNPwV-LzqgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-19 12:16:27
(20 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇩🇪
HoneyPot-FrPri
2026-07-19 12:14:00
(20 hours ago)
34.46.122.21 - - [19/Jul/2026:14:13:59 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 555 "- ...
show more
34.46.122.21 - - [19/Jul/2026:14:13:59 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638
...
show less
Bad Web Bot
Web App Attack
🇩🇪
NihiliousMonk
2026-07-19 12:11:32
(20 hours ago)
Fail2Ban report from jail npm-scanners
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-07-19 12:05:25
(20 hours ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇧🇾
lns.bz
2026-07-19 12:04:23
(20 hours ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 11:59:38
(20 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.46.122.21 (21.122.46.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.46.122.21 (21.122.46.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 07:59:31.924788 2026] [security2:error] [pid 26488:tid 26502] [client 34.46.122.21:53252] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frannykingsmith.com.sloveniaflyfishing.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frannykingsmith.com.sloveniaflyfishing.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aly8I9QVkQa3ZyLuWcLyqQAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-19 11:59:26
(20 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking