🇫🇷
Tonga-Soa
2026-05-17 17:37:35
(3 weeks ago)
"use of nvopzp ... script by Baby hacker"
Web App Attack
SQL Injection
🇮🇹
Inartis
2026-05-13 06:19:07
(3 weeks ago)
[Wed May 13 08:19:05.929631 2026] [proxy_fcgi:error] [pid 481830:tid 137024723990208] [client 5.253. ...
show more
[Wed May 13 08:19:05.929631 2026] [proxy_fcgi:error] [pid 481830:tid 137024723990208] [client 5.253.205.180:49748] AH01071: Got error 'Primary script unknown', referer: https://termedivenezia.it/wp-login.php
[Wed May 13 08:19:06.409362 2026] [proxy_fcgi:error] [pid 509025:tid 137024220690112] [client 5.253.205.180:49750] AH01071: Got error 'Primary script unknown', referer: https://termedivenezia.it/wp-login.php
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
percocet
2026-05-11 10:05:05
(4 weeks ago)
Cloudflare blocked 996 requests (HTTP 403) in 1h. Country: BE
DDoS Attack
Web App Attack
🇫🇷
Kenshin869
2026-04-28 03:16:29
(1 month ago)
Wordpress unauthorized access attempt
Brute-Force
2026-04-27 16:15:38
(1 month ago)
Web attack blocked by Wordfence on www.charlesquaedvlieg.nl (135 hits). Reported by CRMON.
Web App Attack
🇫🇷
masterguru
2026-04-27 15:16:48
(1 month ago)
(wordpress) Apache: Failed WordPress login from 5.253.205.180 (BE/Belgium/-): 10 in the last 3600 se ...
show more
(wordpress) Apache: Failed WordPress login from 5.253.205.180 (BE/Belgium/-): 10 in the last 3600 secs (0-193)
show less
Hacking
🇩🇪
Click-Networks
2026-04-27 14:08:47
(1 month ago)
Web Spam
Brute-Force
Exploited Host
🇫🇷
masterguru
2026-04-27 09:44:04
(1 month ago)
(wordpress) Apache: Failed WordPress login from 5.253.205.180 (BE/Belgium/-): 10 in the last 3600 se ...
show more
(wordpress) Apache: Failed WordPress login from 5.253.205.180 (BE/Belgium/-): 10 in the last 3600 secs (0-196)
show less
Hacking
🇫🇷
SpaceHost-Server
2026-04-26 19:43:46
(1 month ago)
5.253.205.180 - - [26/Apr/2026:21:43:42 +0200] "POST /wp-login.php HTTP/1.1" 200 8293 "https://arv-s ...
show more
5.253.205.180 - - [26/Apr/2026:21:43:42 +0200] "POST /wp-login.php HTTP/1.1" 200 8293 "https://arv-suchhundestaffel.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
5.253.205.180 - - [26/Apr/2026:21:43:43 +0200] "POST /wp-login.php HTTP/1.1" 200 8294 "https://arv-suchhundestaffel.de/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
5.253.205.180 - - [26/Apr/2026:21:43:45 +0200] "POST /wp-login.php HTTP/1.1" 200 8295 "https://arv-suchhundestaffel.de/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0"
show less
Hacking
Web App Attack
🇦🇺
aglenday
2026-04-20 19:30:32
(1 month ago)
Honeypot hit: Unauthorized traffic on 21/ftpd
Port Scan
🇩🇪
conseilgouz
2026-04-11 06:14:45
(1 month ago)
ece-7 : Trying access unauthorized files/dir=>/wp-admin/function.php
Hacking
🇺🇸
TPI-Abuse
2026-04-10 20:15:47
(1 month ago)
(mod_security) mod_security (id:240000) triggered by 5.253.205.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 5.253.205.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 10 16:15:39.322040 2026] [security2:error] [pid 3298690:tid 3298690] [client 5.253.205.180:43658] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||1healthplace.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "1healthplace.com"] [uri "/images/stories/themes.php"] [unique_id "adlaaz0B6eJbANH5GAM8rAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-04-09 06:25:53
(1 month ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-09 02:05:36
(1 month ago)
(mod_security) mod_security (id:240000) triggered by 5.253.205.180 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240000) triggered by 5.253.205.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 08 22:05:29.027888 2026] [security2:error] [pid 2892984:tid 2892984] [client 5.253.205.180:44042] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||shortprovincegirl.michaelsabbey.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "shortprovincegirl.michaelsabbey.org"] [uri "/images/stories/themes.php"] [unique_id "adcJaTBD9HmXs3AzftjQ-wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-04-08 18:03:01
(2 months ago)
31.361 requests in 1 hour (6d15h59m)
Brute-Force
Bad Web Bot