🇫🇷
masterguru
2026-10-22 00:42:47
(4 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)
Hacking
🇺🇸
TPI-Abuse
2026-10-21 16:43:24
(12 hours ago)
(mod_security) mod_security (id:225170) triggered by 81.56.78.74 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:225170) triggered by 81.56.78.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:43:18.870979 2026] [security2:error] [pid 7608:tid 7608] [client 81.56.78.74:36962] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nypatriotcards.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nypatriotcards.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atjrpkRhHs8skSOvIDoWdgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-10-19 22:17:32
(2 days ago)
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 ...
show more
Not following 301 redirects — wasted requests | method: POST | path: /wp-login.php | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
1cyb3rpunk
2026-10-19 20:13:03
(2 days ago)
Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_prob ...
show more
Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
2026-10-18 21:35:45
(3 days ago)
Attempt to POST to xmlrpc.php at 2026-10-18T21:35:45+00:00
Brute-Force
Web App Attack
🇺🇸
1cyb3rpunk
2026-10-15 03:07:20
(1 week ago)
Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_prob ...
show more
Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-10-14 00:08:50
(1 week ago)
(old_win_chrome) Blocked old Windows Chrome 81.56.78.74 (IT/Italy/-)
Hacking
🇩🇪
FeG Deutschland
2026-10-13 07:01:25
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇩🇪
Packets-Decreaser.NET
2026-10-11 01:19:23
(1 week ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
2026-10-10 08:50:45
(1 week ago)
WordPress Brute Force
Brute-Force
2026-10-08 15:01:03
(1 week ago)
🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.
Web App Attack
🇲🇽
octageeks.com
2026-09-29 04:08:14
(3 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
LRob
2026-09-27 02:26:44
(3 weeks ago)
This address is trying passwords on WordPress logins we host — through the login page or xmlrpc.php, ...
show more
This address is trying passwords on WordPress logins we host — through the login page or xmlrpc.php, often across several sites — for accounts it does not own. This is credential brute force or credential stuffing, the way sites get hijacked to spread malware and spam; blocked. Please check the machine for malware or an attack tool. | path: /wp-login.php | 2026-09-27 02:26 UTC
show less
Brute-Force
Web App Attack
🇩🇪
Marc
2026-09-26 04:13:05
(3 weeks ago)
81.56.78.74 - - [26/Sep/2026:06:13:04 +0200] "GET /readme.html HTTP/2.0" 404 483 "-" "Mozilla/5.0 (W ...
show more
81.56.78.74 - - [26/Sep/2026:06:13:04 +0200] "GET /readme.html HTTP/2.0" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 81.56.78.74 - - [26/Sep/2026:06:13:04 +0200] "GET /wp-json/ HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 81.56.78.74 - - [26/Sep/2026:06:13:04 +0200] "GET /wp-json/wp/v2/users?_fields=slug&per_page=100&page=1 HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
show less
Brute-Force
2026-09-23 16:53:31
(4 weeks ago)
Web application attack detected.
Web App Attack