🇧🇪
cmbplf
2026-07-11 01:23:25
(1 hour ago)
332 requests with url.path */.well-known/acme-challenge/*.php
250 requests with url.path */.well-k ...
show more
332 requests with url.path */.well-known/acme-challenge/*.php
250 requests with url.path */.well-known/pki-validation/*.php
show less
Brute-Force
Bad Web Bot
🇳🇿
Antinson
2026-07-10 14:16:32
(12 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇩🇪
Ba-Yu
2026-07-09 21:05:08
(1 day ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
kosada.com
2026-07-09 20:09:39
(1 day ago)
Web vulnerability probing: /inputs.php
Web App Attack
🇷🇺
avaio-media
2026-07-09 19:18:13
(1 day ago)
Web App Attack
2026-07-09 18:20:42
(1 day ago)
45.134.20.172 - - [09/Jul/2026:20:19:18 +0200] "GET /default.php HTTP/1.1" 404 483 "-" "Mozilla/5.0 ...
show more
45.134.20.172 - - [09/Jul/2026:20:19:18 +0200] "GET /default.php HTTP/1.1" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
45.134.20.172 - - [09/Jul/2026:20:19:18 +0200] "GET /wp-includes/assets/info.php HTTP/1.1" 404 483 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.134.20.172 - - [09/Jul/2026:20:19:20 +0200] "GET /wp-includes/class.api.php HTTP/1.1" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0"
45.134.20.172 - - [09/Jul/2026:20:19:22 +0200] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95"
45.134.20.172 - - [09/Jul/2026:20:19:23 +0200] "GET /wp-admin/chosen.php HTTP/1.1" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/201
...
show less
DDoS Attack
🇺🇸
TPI-Abuse
2026-07-09 16:56:21
(1 day ago)
(mod_security) mod_security (id:240000) triggered by 45.134.20.172 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 45.134.20.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 12:56:17.180094 2026] [security2:error] [pid 4703:tid 4703] [client 45.134.20.172:28533] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||fxbgsanta.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "fxbgsanta.com"] [uri "/images/stories/themes.php"] [unique_id "ak_SsZY57RXPh88vW-onjwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-09 09:51:04
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇿
Antinson
2026-07-09 09:32:00
(1 day ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
2026-07-09 01:40:20
(2 days ago)
[da.kdns.gr] httpd-suspicious-path: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/ ...
show more
[da.kdns.gr] httpd-suspicious-path: sites=www.example.com; logs=/var/log/httpd/access_log; samples=/wp-content/themes/hello-element/footer.php | /wp-admin/network/admin.php | /wp-content/languages/plugins.php
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-07-08 12:18:28
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 19:44:48
(3 days ago)
(mod_security) mod_security (id:240000) triggered by 45.134.20.172 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 45.134.20.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 15:44:44.688957 2026] [security2:error] [pid 12202:tid 12202] [client 45.134.20.172:45771] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||kittensquid.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "kittensquid.com"] [uri "/images/stories/themes.php"] [unique_id "ak1XLFf-wOPs3PyYuD2zPAAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-30 04:38:58
(1 week ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇫🇷
Octopuce
2026-06-30 03:02:08
(1 week ago)
Aggressive web search of vulnerable pages: /wp-content/plugins/pwnd-1/pwnd.php /style.php /wp-conten ...
show more
Aggressive web search of vulnerable pages: /wp-content/plugins/pwnd-1/pwnd.php /style.php /wp-content/plugins/elementor/ /wp-includes/IXR/ /wp- ...
show less
Web App Attack
🇩🇪
YF
2026-06-30 02:10:18
(1 week ago)
Attaque distribuée subnet
DDoS Attack
Web App Attack