🇨🇭
backslash
2026-07-13 14:51:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2026-07-13 13:23:46
(2 months ago)
[server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2018.gr; logs=/var/log/httpd/domains/aidshep ...
show more
[server.tmg.gr] httpd-suspicious-path: sites=www.aidshep2018.gr; logs=/var/log/httpd/domains/aidshep2018.gr.log; samples=/wp-includes/woocommerce-call.php | /wp-content/plugins/wordpress-seo/wp-seo-main-float.php | /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php
show less
Hacking
Web App Attack
🇫🇷
Octopuce
2026-07-13 11:52:43
(2 months ago)
Aggressive web search of vulnerable pages: /wp-content/themes/index.php /wp-content/themes/builder-a ...
show more
Aggressive web search of vulnerable pages: /wp-content/themes/index.php /wp-content/themes/builder-and-developer/inc/tgm/error.php /wp-content/ ...
show less
Web App Attack
🇩🇪
LRob
2026-07-13 05:23:15
(2 months ago)
CrowdSec: crowdsecurity/http-wordpress-scan | req: ["/wp-content/plugins/wordpress-seo/wp-seo-main-f ...
show more
CrowdSec: crowdsecurity/http-wordpress-scan | req: ["/wp-content/plugins/wordpress-seo/wp-seo-main-float.php","/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php","/wp-content/themes/news-portal/error.php","/wp-content/themes/fukasawa/inc/classes/403.php"] | UA: ["Go-http-client/2.0"]
show less
Web App Attack
🇧🇾
lns.bz
2026-07-13 04:24:52
(2 months ago)
Too many 404 requests [BY]
Web App Attack
🇬🇧
consul.to
2026-07-13 03:13:59
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
VHosting
2026-07-13 00:45:04
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-05-31 23:50:11
(3 months ago)
10 attempts against mh-misc-ban on frost
Web App Attack
🇮🇱
spd.co.il
2026-05-24 02:04:55
(3 months ago)
Web application attack detected
Hacking
Web App Attack
🇮🇱
Dolphi
2026-05-08 13:20:07
(4 months ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
NicoID
2026-05-07 00:05:12
(4 months ago)
45.67.99.2 - - [06/May/2026:03:55:03 -0600] "GET /wp-content/themes/bltm/wp-login.php HTTP/2.0" 404 ...
show more
45.67.99.2 - - [06/May/2026:03:55:03 -0600] "GET /wp-content/themes/bltm/wp-login.php HTTP/2.0" 404 0 "http://cfield.org/wp-content/themes/bltm/wp-login.php" "Go-http-client/2.0"
...
show less
Brute-Force
🇬🇧
poundawebsiteltd
2026-05-06 06:38:46
(4 months ago)
Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 45.67.99.2 - - [06/May/2026:07:38:45 +01 ...
show more
Apache 403 Forbidden Access. Evidence: [REDACTED_DOMAIN]:80 45.67.99.2 - - [06/May/2026:07:38:45 +0100] GET /classwithtostring.php HTTP/1.1 403 158 - Go-http-client/1.1
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 05:26:29
(4 months ago)
(mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 01:26:25.424853 2026] [security2:error] [pid 32176:tid 32197] [client 45.67.99.2:41867] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||certifiedfinancialmanager.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "certifiedfinancialmanager.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afrRAU6RCeqyaCx7uxymFgAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 02:52:45
(4 months ago)
(mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:234930) triggered by 45.67.99.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 22:52:40.588070 2026] [security2:error] [pid 12031:tid 12031] [client 45.67.99.2:37861] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6787"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)||crooked1826.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "crooked1826.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afqs-D-WSI3vu29UOKachgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-05-06 02:24:31
(4 months ago)
Web attack/malicious scanning detected
Web App Attack