🇩🇪
AetherFox
2026-11-02 14:11:47
UTC ·
(1 week ago)
AetherFox VoidGuard detected: [Mon Nov 02 14:09:59.386302 2026] [security2:error] [pid 1742949:tid 1742973] [client 209.97.164.151:49663] [client 209.97.164.151] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" aga ...
show more
AetherFox VoidGuard detected: [Mon Nov 02 14:09:59.386302 2026] [security2:error] [pid 1742949:tid 1742973] [client 209.97.164.151:49663] [client 209.97.164.151] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "34"] [id "100053"] [msg "wp-includes access blocked by AetherFox VoidGuard"] [hostname "draconigen.net"] [uri "/wp-includes/js/json2.js"] [unique_id "auiZt4c5-3sTiTxymdE07QAAABY"]
[Mon Nov 02 14:10:27.678414 2026] [security2:error] [pid 1650049:tid 1650066] [client 209.97.164.151:50859] [client 209.97.164.151] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "34"] [id "100053"] [msg "wp-includes access blocked by AetherFox VoidGuard"] [hostname "draconigen.net"] [uri "/wp/wp-includes/js/json2.js"] [unique_id "auiZ073Vx4EvcRe1_7WmSQA
...
show less
Hacking
Bad Web Bot
🇺🇸
jfz-abuse
2026-11-02 13:09:05
UTC ·
(1 week ago)
fail2ban: apache-php-recon
...
Web App Attack
🇩🇪
LRob
2026-11-02 12:33:25
UTC ·
(1 week ago)
WordPress attack-tool calls | method: POST | path: /xmlrpc.php | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15 | 2026-11-02 12:33 UTC
Web App Attack
Hacking
🇺🇸
craudiovizai
2026-11-02 12:30:31
UTC ·
(1 week ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /wp/wp-includes/js/json2.js, /wp-includes/js/json2.js. Blocked at the edge.
Bad Web Bot
🇸🇪
Juha Jurvanen
2026-11-02 12:22:30
UTC ·
(1 week ago)
Blocked by Scantide Guard on WordPress. Rule: AbuseIPDB confidence 100% (Scantide Guard reputation policy).
Brute-Force
🇨🇭
lufi
2026-11-02 10:57:10
UTC ·
(1 week ago)
2026-11-02 11:57:09 209.97.164.151: blacklisted Pattern: wp-includes/
...
Web Spam
Brute-Force
Hacking
Web App Attack
🇨🇦
Sakusen
2026-11-02 10:53:30
UTC ·
(1 week ago)
Automated web scanning: 7 reqs, 7 paths probed, 7 returned 404; probed: 7 other
Bad Web Bot
🇰🇷
Jaewon
2026-11-02 09:20:51
UTC ·
(1 week ago)
Automated probing for exposed secrets and admin paths (.env, .git, wp-*, *.php). Banned and reported automatically by fail2ban.
Web App Attack
🇫🇮
kumiko
2026-11-02 08:02:38
UTC ·
(1 week ago)
[2026-11-02 10:02:37] Probing for WordPress exploits [2 requests]
"GET /wp/wp-includes/js/json2.js HTTP/1.1" 404
"GET /wp-includes/js/json2.js HTTP/1.1" 404
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-02 07:02:23
UTC ·
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇩🇪
MarkGGN
2026-11-02 04:38:03
UTC ·
(1 week ago)
Web attack. 209.97.164.151 - - [02/Nov/2026:05:37:59 +0100] "GET /wp/wp-includes/js/[HOST] HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 209. ...
show more
Web attack. 209.97.164.151 - - [02/Nov/2026:05:37:59 +0100] "GET /wp/wp-includes/js/[HOST] HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.2210.133" 209.97.164.151 - - [02/Nov/2026:05:38:02 +0100] "GET /wordpress/wp-includes/js/[HOST] HTTP/1.1" 401 574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36"
show less
Web App Attack
🇫🇷
Baking333
2026-11-02 03:26:45
UTC ·
(1 week ago)
[redacted] 209.97.164.151 - - [02/Nov/2026:04:26:39 +0100] "GET /wp-includes/js/[redacted] HTTP/1.1" 302 6756 0/40881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 443 [redac ...
show more
[redacted] 209.97.164.151 - - [02/Nov/2026:04:26:39 +0100] "GET /wp-includes/js/[redacted] HTTP/1.1" 302 6756 0/40881 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 443 [redacted] 209.97.164.151 - - [02/Nov/2026:04:26:43 +0100] "GET /wp/wp-includes/js/[redacted] HTTP/1.1" 302 6756 0/60669 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" 443
show less
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-02 03:13:20
UTC ·
(1 week ago)
Scanning for WordPress Installations and Vulnerabilities
Web App Attack
🇨🇦
webemsegundos
2026-11-02 02:54:42
UTC ·
(1 week ago)
Web vulnerability scanner: 7 probe paths (e.g. /wp-includes/js/json2.js, /wp/wp-includes/js/json2.js, /wordpress/wp-includes/js/json2.js, /blog/wp-includes/js/json2.js, /new/wp-includes/js/json2.js, /old/wp-includes/js/json2.js). Blocked by WeS Firew ...
show more
Web vulnerability scanner: 7 probe paths (e.g. /wp-includes/js/json2.js, /wp/wp-includes/js/json2.js, /wordpress/wp-includes/js/json2.js, /blog/wp-includes/js/json2.js, /new/wp-includes/js/json2.js, /old/wp-includes/js/json2.js). Blocked by WeS Firewall.
show less
Bad Web Bot
Web App Attack
🇺🇸
mc4bbs
2026-11-02 00:37:31
UTC ·
(1 week ago)
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-includes/js/json2.js -> 301 UA=""; GET /wp-includes/js/json2.js -> 404 UA=""; GET /wp/wp-includes/js/json2.js -> 301 UA=""; GET /wp/wp-includ ...
show more
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /wp-includes/js/json2.js -> 301 UA=""; GET /wp-includes/js/json2.js -> 404 UA=""; GET /wp/wp-includes/js/json2.js -> 301 UA=""; GET /wp/wp-includes/js/json2.js -> 404 UA=""; GET /wordpress/wp-includes/js/json2.js -> 301 UA=""
show less
Web App Attack
Hacking
