🇲🇽
octageeks.com
2026-07-07 04:12:42
(10 hours ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇷🇴
SpamStopper
2026-07-06 10:46:16
(1 day ago)
Fail2Ban - WP Spoofing
Port Scan
Brute-Force
Web App Attack
🇺🇸
Jason Howell
2025-12-07 15:41:52
(6 months ago)
94.130.112.184 - - [07/Dec/2025:09:41:49 -0600] "GET /wp-login.php HTTP/1.1" 301 545 "-" "GRequests/ ...
show more
94.130.112.184 - - [07/Dec/2025:09:41:49 -0600] "GET /wp-login.php HTTP/1.1" 301 545 "-" "GRequests/0.10"
94.130.112.184 - - [07/Dec/2025:09:41:49 -0600] "GET /wp-login.php HTTP/1.1" 200 5467 "http://kingsharvest.net/wp-login.php" "GRequests/0.10"
94.130.112.184 - - [07/Dec/2025:09:41:50 -0600] "POST /wp-login.php HTTP/1.1" 301 545 "-" "GRequests/0.10"
94.130.112.184 - - [07/Dec/2025:09:41:50 -0600] "GET /wp-login.php HTTP/1.1" 200 5468 "http://kingsharvest.net/wp-login.php" "GRequests/0.10"
94.130.112.184 - - [07/Dec/2025:09:41:51 -0600] "GET /wp-login.php?redirect_to=https%3A%2F%2Fkingsharvest.net%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 7305 "https://kingsharvest.net/wp-admin/" "GRequests/0.10"
...
show less
Web App Attack
🇺🇸
Jason Howell
2025-12-06 06:09:33
(7 months ago)
94.130.112.184 - - [06/Dec/2025:00:09:31 -0600] "GET /wp-login.php HTTP/1.1" 301 539 "-" "GRequests/ ...
show more
94.130.112.184 - - [06/Dec/2025:00:09:31 -0600] "GET /wp-login.php HTTP/1.1" 301 539 "-" "GRequests/0.10"
94.130.112.184 - - [06/Dec/2025:00:09:31 -0600] "GET /wp-login.php HTTP/1.1" 200 4653 "http://abstractco.com/wp-login.php" "GRequests/0.10"
94.130.112.184 - - [06/Dec/2025:00:09:31 -0600] "POST /wp-login.php HTTP/1.1" 301 539 "-" "GRequests/0.10"
94.130.112.184 - - [06/Dec/2025:00:09:31 -0600] "GET /wp-login.php HTTP/1.1" 200 4652 "http://abstractco.com/wp-login.php" "GRequests/0.10"
94.130.112.184 - - [06/Dec/2025:00:09:33 -0600] "GET /wp-login.php?redirect_to=https%3A%2F%2Fabstractco.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 6816 "https://abstractco.com/wp-admin/" "GRequests/0.10"
...
show less
Web App Attack
🇪🇸
masterguru
2025-12-05 12:13:53
(7 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "grequests" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "grequests" at REQUEST_HEADERS:User-Agent. (1100000-123)
show less
Bad Web Bot
🇪🇸
masterguru
2025-12-04 22:21:16
(7 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "grequests" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "grequests" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
🇺🇸
WeekendWeb
2025-11-29 14:48:21
(7 months ago)
Wordpress Vunerability attack
Web App Attack
🇩🇪
LRob
2025-02-26 21:00:11
(1 year ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-02-26 09:03:26
(1 year ago)
(mod_security) mod_security (id:240335) triggered by 94.130.112.184 (h50.default-host.net): 1 in the ...
show more
(mod_security) mod_security (id:240335) triggered by 94.130.112.184 (h50.default-host.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 26 04:03:18.481217 2025] [security2:error] [pid 13151:tid 13151] [client 94.130.112.184:5212] [client 94.130.112.184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 94.130.112.184 (+1 hits since last alert)|bogl.no|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bogl.no"] [uri "/xmlrpc.php"] [unique_id "Z77Y1tnAYukwiOS6pBs0bwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2025-02-21 05:13:23
(1 year ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇨🇦
polycoda
2025-01-28 16:00:45
(1 year ago)
📄 Probes for wp-login.php and other inexistent URLs
Hacking
Web App Attack
🇳🇱
Mangelot Hosting
2025-01-28 14:47:09
(1 year ago)
(WPLOGIN) WP Login Attack 94.130.112.184 (DE/Germany/h50.default-host.net): 5 in the last 3600 secs; ...
show more
(WPLOGIN) WP Login Attack 94.130.112.184 (DE/Germany/h50.default-host.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇦🇺
MAGIC
2025-01-25 13:01:47
(1 year ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇩🇪
LRob
2025-01-24 23:30:23
(1 year ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2025-01-24 18:31:52
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 15
Exploited Host
Web App Attack