🇨🇭
4server
2026-11-09 22:01:55
UTC ·
(20 hours ago)
[MonNov0923:01:52.7865802026][security2:error][pid3349364:tid3349391][client134.209.149.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id ...
show more
[MonNov0923:01:52.7865802026][security2:error][pid3349364:tid3349391][client134.209.149.167:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"whatsdecor.ch\"][uri\"/xmlrpc.php\"][unique_id\"avJC0L8feWF9Wj3LUuyPVwAAABM\"]
show less
Hacking
Web App Attack
🇫🇷
Kenshin869
2026-11-09 21:56:39
UTC ·
(20 hours ago)
Wordpress unauthorized access attempt
Brute-Force
🇫🇷
masterguru
2026-11-09 21:55:43
UTC ·
(20 hours ago)
(wordpress) Apache: Failed WordPress login from 134.209.149.167 (IN/India/-): 10 in the last 3600 secs (0-196)
Hacking
🇵🇱
gandaflux
2026-11-09 20:17:08
UTC ·
(22 hours ago)
134.209.149.167 [redacted-domain] - [09/Nov/2026:21:17:02 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.14 ...
show more
134.209.149.167 [redacted-domain] - [09/Nov/2026:21:17:02 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 [redacted-domain] - [09/Nov/2026:21:17:03 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 [redacted-domain] - [09/Nov/2026:21:17:03 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 [redacted-domain] - [09/Nov/2026:21:17:03 +0100] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win6
show less
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-11-09 20:15:02
UTC ·
(22 hours ago)
WordPress attack attempt detected by Fail2Ban
Web App Attack
🇺🇸
solantex
2026-11-09 20:01:37
UTC ·
(22 hours ago)
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Web App Attack
🇧🇷
radardatelecom
2026-11-09 16:55:04
UTC ·
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇫🇷
Murazaki
2026-11-09 15:41:20
UTC ·
(1 day ago)
134.209.149.167 - - [09/Nov/2026:16:41:20 +0100] "" 400 0 "-" "-" "-"
...
Hacking
🇺🇸
mnsf
2026-11-09 13:05:05
UTC ·
(1 day ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇩🇪
dbmwebdesign
2026-11-09 12:15:28
UTC ·
(1 day ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇮🇳
dineshskt4all
2026-11-09 06:26:11
UTC ·
(1 day ago)
[Mon Nov 09 06:26:09.366134 2026] [proxy_fcgi:error] [pid 1427446:tid 132830982039232] [client 134.209.149.167:0] AH01071: Got error 'Primary script unknown'
...
Brute-Force
🇺🇸
TPI-Abuse
2026-11-09 05:19:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 134.209.149.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:19:33.483662 2026] [security2:error] [pid 28897:tid 28928] [client 134.209.149.167:5686 ...
show more
(mod_security) mod_security (id:225170) triggered by 134.209.149.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 00:19:33.483662 2026] [security2:error] [pid 28897:tid 28928] [client 134.209.149.167:56862] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lamoradadecorbiche.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lamoradadecorbiche.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "avFX5cUvZDQhFNRvThAoxAAAAYA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
erwindecker
2026-11-09 04:46:34
UTC ·
(1 day ago)
134.209.149.167 - - [09/Nov/2026:05:46:33 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 - - [09/Nov/2026:05:46:33 +0100] "GET / ...
show more
134.209.149.167 - - [09/Nov/2026:05:46:33 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 - - [09/Nov/2026:05:46:33 +0100] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 - - [09/Nov/2026:05:46:33 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Port Scan
Bad Web Bot
Web App Attack
🇳🇱
javierin
2026-11-09 04:15:43
UTC ·
(1 day ago)
134.209.149.167 - xn--silo-epa.es - - [09/Nov/2026:04:15:42 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 2171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209 ...
show more
134.209.149.167 - xn--silo-epa.es - - [09/Nov/2026:04:15:42 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 2171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 - xn--silo-epa.es - - [09/Nov/2026:04:15:42 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 - xn--silo-epa.es - - [09/Nov/2026:04:15:42 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.149.167 - xn--silo-epa.es - - [09/Nov/2026:04:15:42 +0000] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
134.209.1
...
show less
Hacking
Web App Attack
🇧🇪
cmbplf
2026-11-08 21:30:58
UTC ·
(1 day ago)
1.018 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
