🇫🇷
masterguru
2026-09-30 04:08:11
UTC ·
(1 month ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 37.187.149.207 (FR/France/ns3035762.ip-37-187-149.eu): 1 in the last 3600 secs (0-195)
Hacking
🇩🇰
ScamAware
2026-09-17 04:26:45
UTC ·
(1 month ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloud ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight.
show less
Bad Web Bot
🇩🇪
ghostwarriors
2026-09-17 02:50:04
UTC ·
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-17 02:34:26
UTC ·
(1 month ago)
37.187.149.207 - - [17/Sep/2026:04:34:20 +0200] "GET / HTTP/1.1" 301 4739 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [17/Sep/2026:04:34:21 +0200] "GET / HTT ...
show more
37.187.149.207 - - [17/Sep/2026:04:34:20 +0200] "GET / HTTP/1.1" 301 4739 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [17/Sep/2026:04:34:21 +0200] "GET / HTTP/1.1" 200 11902 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [17/Sep/2026:04:34:22 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [17/Sep/2026:04:34:23 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 403 4573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [17/Sep/2026:04:34:23 +0200] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 403 4572 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C
show less
Web App Attack
Hacking
🇬🇧
consul.to
2026-09-16 23:32:39
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇪🇸
scm
2026-09-16 06:04:09
UTC ·
(1 month ago)
Web App Attack
🇩🇪
LRob
2026-09-16 05:58:14
UTC ·
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-16 05:58 UTC
Bad Web Bot
🇩🇰
ScamAware
2026-09-16 04:30:33
UTC ·
(1 month ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloud ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight.
show less
Bad Web Bot
🇩🇪
FeG Deutschland
2026-09-16 04:10:00
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇬🇧
consul.to
2026-09-15 23:20:43
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇭🇷
bubausluge
2026-09-15 22:52:11
UTC ·
(1 month ago)
Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-15 22:31:10 to 2026-09-15 22:31:10
Web App Attack
Hacking
🇫🇷
Omar Martínez
2026-09-15 21:34:04
UTC ·
(1 month ago)
37.187.149.207 - - [15/Sep/2026:15:34:03 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 7266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
Phishing
Email Spam
Blog Spam
🇩🇪
FeG Deutschland
2026-09-15 17:26:56
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
Anonymous
2026-09-15 12:22:28
UTC ·
(1 month ago)
Attack detected: 37.187.149.207 [2026-09-15]
Categories: 21
--- wp2shell/batch exploit (4 hits) ---
37.187.149.207 - - [15/Sep/2026:11:19:30 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 6461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe ...
show more
Attack detected: 37.187.149.207 [2026-09-15]
Categories: 21
--- wp2shell/batch exploit (4 hits) ---
37.187.149.207 - - [15/Sep/2026:11:19:30 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 6461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [15/Sep/2026:11:19:35 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 500 6461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [15/Sep/2026:11:19:38 +0000] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 500 6462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
37.187.149.207 - - [15/Sep/2026:11:19:41 +0000] "POST /index.php/wp-json/batch/v1 HTTP/1.1" 500 6462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Web App Attack
🇩🇪
jbcrn
2026-09-15 10:50:34
UTC ·
(1 month ago)
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
show less
Bad Web Bot
Web App Attack