๐ณ๐ฟ
Tripwire
2026-10-25 19:02:11
(1 day ago)
Wordpress login attempts
Brute-Force
Web App Attack
Anonymous
2026-10-24 22:15:34
(2 days ago)
Web attack blocked by Wordfence on heemkundesjin.nl (1 hit). Reported by CRMON.
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-24 19:17:03
(2 days ago)
Try to access /xmlrpc.php
Web App Attack
๐ฉ๐ช
LRob
2026-10-22 10:32:29
(5 days ago)
Code forge crawl (headless) | path: /WP/qrcode-maker/issues | src_port: 33736
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-22 00:31:47
(5 days ago)
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 78.193.40.202 - - [22/Oct/2026:02:31:33 +0200] "GET /wp-json/wp/v2/comments?per_page=100&page=1&_fields=author_name,author_url HTTP/2.0" 404 379 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
78.193.40.202 - - [22/Oct/2026:02:31:33 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug&per_page=100&page=1 HTTP/2.0" 404 379 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
78.193.40.202 - - [22/Oct/2026:02:31:34 +0200] "GET /wp-json/rankmath/v1/getHead?url=https://www.poepkaart.nl HTTP/2.0" 404 379 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
poepkaart.nl
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
JRID
2026-10-21 01:30:04
(6 days ago)
Detected by CrowdSec + Suricata IDS: automated attack/scan against web servers.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 22:12:21
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 78.193.40.202 (78-193-40-202.subs.proxad.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 78.193.40.202 (78-193-40-202.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:12:16.273115 2026] [security2:error] [pid 11372:tid 11395] [client 78.193.40.202:38856] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||hmpdecors.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hmpdecors.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atKhQGjkWTeoDLFv-F-TwQAAANU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-16 12:02:32
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 17:47:39
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 78.193.40.202 (78-193-40-202.subs.proxad.net): ...
show more
(mod_security) mod_security (id:225170) triggered by 78.193.40.202 (78-193-40-202.subs.proxad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 13:47:33.445436 2026] [security2:error] [pid 32313:tid 32313] [client 78.193.40.202:56736] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artizandecor.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artizandecor.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as5utRDx10UMykZLz5BOVwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Packets-Decreaser.NET
2026-10-12 15:25:52
(2 weeks ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
๐ฉ๐ช
Packets-Decreaser.NET
2026-10-11 00:39:23
(2 weeks ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
๐ฒ๐น
Malta
2026-10-10 19:41:51
(2 weeks ago)
78.193.40.202 - - [10/Oct/2026:21:41:51 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ...
show more
78.193.40.202 - - [10/Oct/2026:21:41:51 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
๐ซ๐ท
masterguru
2026-10-10 05:10:11
(2 weeks ago)
(modsec_5040) ModSec 5040: API Basic Auth blocked from 78.193.40.202 (FR/France/78-193-40-202.subs.p ...
show more
(modsec_5040) ModSec 5040: API Basic Auth blocked from 78.193.40.202 (FR/France/78-193-40-202.subs.proxad.net): 1 in the last 3600 secs (0-195)
show less
Hacking
๐ณ๐ฑ
debestelapp
2026-10-09 18:50:02
(2 weeks ago)
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-09-26 04:14:01
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack