🇩🇪
iNetWorker
2026-07-22 05:03:30
(39 minutes ago)
trolling for resource vulnerabilities
Web App Attack
🇧🇪
taivas.nl
2026-07-22 04:32:59
(1 hour ago)
Many_bad_calls
Web App Attack
🇺🇸
CBJ
2026-07-22 03:20:10
(2 hours ago)
fail2ban: apache-random-recon
...
Web App Attack
🇫🇷
ELYAZ
2026-07-22 02:04:42
(3 hours ago)
(wordpress) Failed wordpress login from 68.178.165.65 (US/United States/65.165.178.68.host.secureser ...
show more
(wordpress) Failed wordpress login from 68.178.165.65 (US/United States/65.165.178.68.host.secureserver.net): (CF_ENABLE)
show less
Brute-Force
🇦🇹
nomzamo
2026-07-22 01:58:36
(3 hours ago)
Fail2Ban reported: nginx-noscript
Brute-Force
🇩🇪
barbarella
2026-07-21 21:45:09
(7 hours ago)
unauthorized access to Wordpress REST Api (GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,sl ...
show more
unauthorized access to Wordpress REST Api (GET /wp-json/wp/v2/users?per_page=50&_embed&_fields=id,slug,name)
show less
Hacking
Web App Attack
🇩🇪
BlueWire Hosting
2026-07-21 21:30:06
(8 hours ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
2026-07-21 21:00:16
(8 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
FeG Deutschland
2026-07-21 20:07:05
(9 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
xxkodedxx
2026-07-21 20:05:29
(9 hours ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get in 10m window.
Origin: US / AS26496 GoDaddy.com, LLC
Active: 20:04:38→20:04:45 UTC
Volume: 1 HTTP req, 1 honeypot probe(s)
Bait taken: /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1
Status mix: 200×1
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇬🇧
BRHosting
2026-07-21 19:46:04
(9 hours ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
🇨🇿
huginet
2026-07-21 19:11:29
(10 hours ago)
68.178.165.65 - - [21/Jul/2026:21:09:56 +0200] "GET /wp-json/rankmath/v1/getHead?url=https://www.hug ...
show more
68.178.165.65 - - [21/Jul/2026:21:09:56 +0200] "GET /wp-json/rankmath/v1/getHead?url=https://www.huginet.net HTTP/1.1" 404 151 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
68.178.165.65 - - [21/Jul/2026:21:11:27 +0200] "GET /?author=5 HTTP/1.1" 404 81165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web Spam
Web App Attack
🇮🇩
origrata
2026-07-21 17:55:29
(11 hours ago)
[OGWAF] bad_reputation attack blocked | severity: high | GET /index.php/wp-json/wp/v2/users?per_page ...
show more
[OGWAF] bad_reputation attack blocked | severity: high | GET /index.php/wp-json/wp/v2/users?per_page=100&_fields=slug | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Sa
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 17:52:26
(11 hours ago)
(mod_security) mod_security (id:225170) triggered by 68.178.165.65 (65.165.178.68.host.secureserver. ...
show more
(mod_security) mod_security (id:225170) triggered by 68.178.165.65 (65.165.178.68.host.secureserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 13:52:18.299037 2026] [security2:error] [pid 224438:tid 224438] [client 68.178.165.65:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.southernbroadcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.southernbroadcast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "al-x0mqW93Oaj9Yrn3LCJAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-21 16:08:35
(13 hours ago)
valueaddedpromotions.com.au:443 68.178.165.65 - - [22/Jul/2026:02:08:31 +1000] "GET /?author=2&feed= ...
show more
valueaddedpromotions.com.au:443 68.178.165.65 - - [22/Jul/2026:02:08:31 +1000] "GET /?author=2&feed=rss2 HTTP/1.1" 404 351155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Web App Attack