2026-11-10 07:30:33
UTC ·
(21 hours ago)
Automatically blocked after 18 security events. Observed repeated web application attack probes. Source: Cloudflare security controls.
Hacking
Web App Attack
2026-11-10 07:18:16
UTC ·
(21 hours ago)
Web attack blocked by WAF: GET /wp-content/plugins/gk-stats/readme.txt x2, GET /xmlrpc.php, GET /wp-json/wp/v2/users (CMS Recon Bot detected; Monitoring WordPress 5.3 User Enumeration attempts).
[10/Nov/2026:10:18:14 +0300] "GET /wp-content/plugins/c ...
show more
Web attack blocked by WAF: GET /wp-content/plugins/gk-stats/readme.txt x2, GET /xmlrpc.php, GET /wp-json/wp/v2/users (CMS Recon Bot detected; Monitoring WordPress 5.3 User Enumeration attempts).
[10/Nov/2026:10:18:14 +0300] "GET /wp-content/plugins/complianz-gdpr/readme.txt HTTP/1.1" UA="Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" -> WordPress plugins/themes version enumeration using readme.txt
[10/Nov/2026:10:18:14 +0300] "GET /wp-content/plugins/gk-stats/readme.txt HTTP/1.1" UA="Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHT" -> WordPress plugins/themes version enumeration using readme.txt
[10/Nov/2026:10:18:15 +0300] "GET /wp-content/plugins/gk-stats/readme.txt HTTP/1.1" UA="Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHT" -> WordPress plugins/themes version enumeration using readme.txt; WP plugin/theme readme.…
show less
Web App Attack
🇩🇪
neckaralb-admin.de
2026-11-10 06:10:46
UTC ·
(22 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
ardexter
2026-11-10 05:55:27
UTC ·
(22 hours ago)
Wordpress attack and DDOS
DDoS Attack
Web App Attack
2026-11-09 17:48:42
UTC ·
(1 day ago)
FIMPRODE WEBEXPLOIT 36.82.191.32 (36.82.191.32)
Web App Attack
🇩🇪
big-cloud.nl
2026-11-09 10:58:06
UTC ·
(1 day ago)
Try to access /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Web App Attack
🇪🇸
scaballe
2026-11-09 10:34:47
UTC ·
(1 day ago)
Web App Attack
🇧🇪
taivas.nl
2026-11-09 10:02:04
UTC ·
(1 day ago)
Bad_requests
Bad Web Bot
🇲🇾
Rizzy
2026-11-09 08:34:32
UTC ·
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-11-09 08:22:31
UTC ·
(1 day ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-197)
Hacking
🇺🇸
TPI-Abuse
2026-11-09 06:43:30
UTC ·
(1 day ago)
(mod_security) mod_security (id:234930) triggered by 36.82.191.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:43:23.464934 2026] [security2:error] [pid 9841:tid 9857] [client 36.82.191.32:45536] ModSe ...
show more
(mod_security) mod_security (id:234930) triggered by 36.82.191.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 01:43:23.464934 2026] [security2:error] [pid 9841:tid 9857] [client 36.82.191.32:45536] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||www.abusaimeh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.abusaimeh.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "avFri1dHQX51gMa6HjkDVwAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-09 06:23:07
UTC ·
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 36.82.191.32 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 36.82.191.32 - - [09/Nov/2026:07:22:51 +0100] "POST /vendor/phpunit/phpun ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 36.82.191.32 (ID/Indonesia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 36.82.191.32 - - [09/Nov/2026:07:22:51 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 200 4741 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0" "36.82.191.32" host=abruzzotour.it
show less
Port Scan
🇺🇸
kosada.com
2026-11-09 05:46:20
UTC ·
(1 day ago)
Repeated requests for suspicious nonexistent URLs, for example: /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php (HTTP port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/131.0")
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:39:35
UTC ·
(1 day ago)
(mod_security) mod_security (id:234930) triggered by 36.82.191.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:39:29.511427 2026] [security2:error] [pid 3464:tid 3464] [client 36.82.191.32:46000] ModSe ...
show more
(mod_security) mod_security (id:234930) triggered by 36.82.191.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:39:29.511427 2026] [security2:error] [pid 3464:tid 3464] [client 36.82.191.32:46000] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||abilityimprinting.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "abilityimprinting.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "avFckYd_uYTkpxLw06G3KAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 05:21:52
UTC ·
(1 day ago)
(mod_security) mod_security (id:234930) triggered by 36.82.191.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:21:37.164243 2026] [security2:error] [pid 21866:tid 21866] [client 36.82.191.32:45800] Mod ...
show more
(mod_security) mod_security (id:234930) triggered by 36.82.191.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:21:37.164243 2026] [security2:error] [pid 21866:tid 21866] [client 36.82.191.32:45800] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||abeltours.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "abeltours.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "avFYYYSH0JxAmIuF5lICwAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
