Anonymous
2026-07-19 20:21:33
(2 days ago)
Web App Attack
Brute-Force
Web App Attack
Anonymous
2026-07-19 02:38:09
(2 days ago)
172.69.130.157 - - [19/Jul/2026:04:38:08 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" ...
show more
172.69.130.157 - - [19/Jul/2026:04:38:08 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [19/Jul/2026:04:38:08 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [19/Jul/2026:04:38:08 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [19/Jul/2026:04:38:08 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [19/Jul/2026:04:38:08 +0200] "GET //news/wp-includes/wlwmanifest.xm
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-16 16:02:55
(5 days ago)
172.69.130.157 - - [16/Jul/2026:18:02:54 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
172.69.130.157 - - [16/Jul/2026:18:02:54 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [16/Jul/2026:18:02:54 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [16/Jul/2026:18:02:54 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [16/Jul/2026:18:02:54 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
172.69.130.157 - - [16/Jul/2026:18:02:54 +0200] "GET //cms/wp-includes/wlwmanifest.xml HTT
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-15 08:39:30
(6 days ago)
172.69.130.157 - - [15/Jul/2026:10:39:29 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
172.69.130.157 - - [15/Jul/2026:10:39:29 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
172.69.130.157 - - [15/Jul/2026:10:39:29 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
172.69.130.157 - - [15/Jul/2026:10:39:29 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 445 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
172.69.130.157 - - [15/Jul/2026:10:39:29 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
172.69.130.157 - - [15/Jul/2026:10:39:29 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1
...
show less
Brute-Force
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-07-15 01:41:43
(6 days ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ช๐ธ
antivoid.xyz
2026-07-11 23:34:17
(1 week ago)
Brute-Force
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-07-10 02:52:58
(1 week ago)
172.69.130.157 - - [10/Jul/2026:05:52:58 +0300] "GET /ecp/Current/exporttool/microsoft.exchange.edis ...
show more
172.69.130.157 - - [10/Jul/2026:05:52:58 +0300] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/2.0" 404 107 "-" "Mozilla/5.0 (l9scan/2.0.737313e28333e21323e2430313; +https://leakix.net)"
...
show less
Hacking
Web App Attack
๐บ๐ธ
MPL
2026-07-08 03:10:23
(1 week ago)
tcp/443 (10 or more attempts)
Port Scan
๐ฏ๐ต
S.O.B.A. Dev.
2026-07-06 15:33:57
(2 weeks ago)
Persistent port scanning or vulnerability scanning
Port Scan
Anonymous
2026-07-05 16:30:21
(2 weeks ago)
Web App Attack
Brute-Force
Web App Attack
๐ช๐ธ
antivoid.xyz
2026-07-01 23:32:47
(2 weeks ago)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-01 13:28:23
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 172.69.130.157 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210730) triggered by 172.69.130.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:28:15.654643 2026] [security2:error] [pid 12849:tid 12849] [client 172.69.130.157:12729] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.kratka.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.kratka.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "akUV73Mtv7xKc6xz0AwQBwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-24 19:53:13
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
Anonymous
2026-06-23 11:40:59
(4 weeks ago)
172.69.130.157 - - [23/Jun/2026:13:40:45 +0200] "GET /server-status HTTP/1.1" 403 448 "-" "Mozilla/5 ...
show more
172.69.130.157 - - [23/Jun/2026:13:40:45 +0200] "GET /server-status HTTP/1.1" 403 448 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)"
172.69.130.157 - - [23/Jun/2026:13:40:45 +0200] "GET /server-status HTTP/1.1" 403 253 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)"
172.69.130.157 - - [23/Jun/2026:13:40:47 +0200] "GET /about HTTP/1.1" 404 445 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)"
172.69.130.157 - - [23/Jun/2026:13:40:47 +0200] "GET /about HTTP/1.1" 404 249 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)"
172.69.130.157 - - [23/Jun/2026:13:40:48 +0200] "GET /login.action HTTP/1.1" 404 445 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)"
172.69.130.157 - - [23/Jun/2026:13:40:48 +0200] "GET /login.action HTTP/1.1" 404 249 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)"
172.69.130.157 - - [23/Jun/2026:13:40:50
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-06-22 06:05:59
(4 weeks ago)
172.69.130.157 - - [22/Jun/2026:02:05:58 -0400] "GET /api/config HTTP/1.1" 404 5315 "https://www.goo ...
show more
172.69.130.157 - - [22/Jun/2026:02:05:58 -0400] "GET /api/config HTTP/1.1" 404 5315 "https://www.google.com/search?q=llamadareal.com" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
Web App Attack
SSH