🇺🇸
integrantservices.com
2026-09-01 07:49:05
(4 hours ago)
(wordpress) Failed wordpress login from 45.131.193.209 (US/United States/-)
Brute-Force
🇳🇱
homeshowdomain.nl
2026-08-31 21:59:55
(14 hours ago)
Auto-ban: >3000 req/min op 2026-08-31
Web App Attack
SSH
Hacking
🇩🇪
FeG Deutschland
2026-08-31 19:57:49
(16 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇪🇸
masterguru
2026-08-30 10:24:13
(2 days ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 15:17:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.131.193.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.193.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 11:17:31.655076 2026] [security2:error] [pid 4620:tid 4620] [client 45.131.193.209:48427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/new/.env"] [unique_id "aoR3ixgqFJl3nX-VVZOSPAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 09:55:52
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.193.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.193.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 05:55:42.801772 2026] [security2:error] [pid 8886:tid 8886] [client 45.131.193.209:50941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.88"] [uri "/wp-content/.env"] [unique_id "aoQsHqT4WKdjoMxWDz0URQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 08:17:46
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.131.193.209 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 45.131.193.209 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 18 04:17:38.027882 2026] [security2:error] [pid 30079:tid 30079] [client 45.131.193.209:34733] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.32"] [uri "/wp-admin/.env"] [unique_id "aoQVIgQrvtvtGVUNjJ47eAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-12 14:53:37
(2 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇩🇪
abdubhai
2026-08-12 13:36:28
(2 weeks ago)
45.131.193.209 - - [12/Aug/2026:
...
Brute-Force
🇩🇪
FeG Deutschland
2026-08-11 15:50:52
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇩🇪
neckaralb-admin.de
2026-08-11 10:06:29
(3 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇹🇷
oalver
2026-08-10 14:39:52
(3 weeks ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-09. Risk score: 90/100.
show less
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-10 07:08:07
(3 weeks ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
NL/Netherlands/-
Web App Attack
🇹🇷
oalver
2026-08-10 06:41:13
(3 weeks ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-09. Risk score: 60/100.
show less
Web App Attack
🇹🇷
oalver
2026-08-10 02:46:07
(3 weeks ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signa ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 200). First seen: 2026-08-09. Risk score: 30/100.
show less
Web App Attack