|
🇧🇪
cmbplf
|
|
913 requests with url.path //xmlrpc.php
584 requests with url.path */wp-includes/wlwmanifest.xml
|
Brute-Force
Bad Web Bot
|
|
🇺🇸
mnsf
|
|
Abuse Detected (11)
|
Brute-Force
Web App Attack
|
|
🇬🇷
setupgr
|
|
(mod_security) mod_security (id:11000011) triggered by 104.198.229.224 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:19:39.51 ...
show more
(mod_security) mod_security (id:11000011) triggered by 104.198.229.224 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:19:39.511153 2026] [security2:error] [pid 1636022:tid 1636608] [client 104.198.229.224:62210] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 224.229.198.104.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "tavernadimitris.com"] [uri "/"] [unique_id "as-5q_ym6Pbuzje9ygMYYQAAApg"]
show less
|
Port Scan
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇩🇪
spam.must.die
|
|
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 104.198.229.224 - - [14/Oct/2026:17:14:20 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/ ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 104.198.229.224 - - [14/Oct/2026:17:14:20 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"104.198.229.224 - - [14/Oct/2026:17:14:20 +0000] "POST //xmlrpc.php HTTP/1.1" 200 627 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"104.198.229.224 - - [14/Oct/2026:17:14:21 +0000] "POST //xmlrpc.php HTTP/1.1" 200 6
show less
|
Hacking
Web App Attack
|
|
🇺🇸
integrantservices.com
|
|
(wordpress) Failed wordpress login from 104.198.229.224 (US/United States/224.229.198.104.bc.googleusercontent.com)
|
Brute-Force
|
|
🇳🇱
wlt-blocker
|
|
Unauthorized access to webpage admin
|
Web App Attack
|
|
🇧🇷
Halux
|
|
104.198.229.224 Web Application Firewall multiple violations
|
Hacking
Web App Attack
|
|
Anonymous
|
|
(wordpress) Failed wordpress login from 104.198.229.224 (US/United States/224.229.198.104.bc.googleusercontent.com)
|
Brute-Force
|
|
Anonymous
|
|
Blocked by ModSec and CSF
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 104.198.229.224 (224.229.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 13:11:08.292814 2026] [security2:error] [pid 23949: ...
show more
(mod_security) mod_security (id:225170) triggered by 104.198.229.224 (224.229.198.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 13:11:08.292814 2026] [security2:error] [pid 23949:tid 23949] [client 104.198.229.224:58487] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.modalsoftware.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.modalsoftware.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "as-3rG0SxqkD8mtkNwHDqwAAABk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇴
jad-abuse
|
|
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: scanner_ua. Observed by 1 sensor(s); 1 hits.
|
Bad Web Bot
Web App Attack
|
|
🇬🇷
setupgr
|
|
(mod_security) mod_security (id:11000011) triggered by 104.198.229.224 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:17:04.30 ...
show more
(mod_security) mod_security (id:11000011) triggered by 104.198.229.224 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:17:04.304929 2026] [security2:error] [pid 1636158:tid 1636267] [client 104.198.229.224:61774] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 224.229.198.104.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "tavernadimitris.com"] [uri "/"] [unique_id "as-q_wPJAEynVnhmunTIjgAAA4g"]
show less
|
Port Scan
|
|
🇺🇦
URAN Publishing Service
|
|
[14/Oct/2026:19:13:01 +0300] -- 104.198.229.224 Ban reason: User-Agent CMS-Checker
|
Bad Web Bot
Web App Attack
|
