🇳🇱
homeshowdomain.nl
2026-03-28 23:02:13
UTC ·
(7 months ago)
Auto-ban: 273 malicious requests on 2026-03-27 (e.g., env/backup probes, brute-force, or error bursts).
Web App Attack
SSH
Hacking
🇺🇸
octageeks.com
2026-03-28 04:09:11
UTC ·
(7 months ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
🇳🇱
thedreamer.nl
2026-03-27 19:29:26
UTC ·
(7 months ago)
34.11.115.215 - - [27/Mar/2026:20:25:35 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "Washington" "38.89400" ...
show more
34.11.115.215 - - [27/Mar/2026:20:25:35 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "Washington" "38.89400" "-77.03650"
34.11.115.215 - - [27/Mar/2026:20:25:35 +0100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "Washington" "38.89400" "-77.03650"
34.11.115.215 - - [27/Mar/2026:20:25:36 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "Washington" "38.89400" "-77.03650"
34.11.115.215 - - [27/Mar/2026:20:25:36 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/53
...
show less
Brute-Force
Bad Web Bot
🇫🇮
Kimmo Rieskaniemi
2026-03-27 19:29:11
UTC ·
(7 months ago)
CrowdSec triggered crowdsecurity/http-probing
Web App Attack
Hacking
🇳🇿
Antinson
2026-03-27 19:16:32
UTC ·
(7 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇫🇷
Baking333
2026-03-27 19:15:22
UTC ·
(7 months ago)
[redacted] 34.11.115.215 - - [27/Mar/2026:20:15:21 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 1544 0/38465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 34 ...
show more
[redacted] 34.11.115.215 - - [27/Mar/2026:20:15:21 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 1544 0/38465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" [redacted] 34.11.115.215 - - [27/Mar/2026:20:15:21 +0100] "GET //[redacted]?rsd HTTP/1.1" 302 1544 0/33165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-27 19:03:42
UTC ·
(7 months ago)
(mod_security) mod_security (id:225170) triggered by 34.11.115.215 (215.115.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 15:03:34.976820 2026] [security2:error] [pid 965:tid 96 ...
show more
(mod_security) mod_security (id:225170) triggered by 34.11.115.215 (215.115.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 27 15:03:34.976820 2026] [security2:error] [pid 965:tid 965] [client 34.11.115.215:52905] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.rootsofwellnessayurveda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rootsofwellnessayurveda.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "acbUhtosoEP8fjesTa16FwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-03-27 19:03:01
UTC ·
(7 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
Anonymous
2026-03-27 19:01:27
UTC ·
(7 months ago)
[redacted] 34.11.115.215 - - [27/Mar/2026:20:01:18 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27 ...
show more
[redacted] 34.11.115.215 - - [27/Mar/2026:20:01:18 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:20:01:19 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:20:01:20 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:20:01:21 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:20:01:22 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win
...
show less
Hacking
Web App Attack
🇧🇪
cmbplf
2026-03-27 18:59:34
UTC ·
(7 months ago)
74.579 requests in 1 hour (2mos16h59m)
Brute-Force
Bad Web Bot
Anonymous
2026-03-27 18:45:50
UTC ·
(7 months ago)
[redacted] 34.11.115.215 - - [27/Mar/2026:19:45:43 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27 ...
show more
[redacted] 34.11.115.215 - - [27/Mar/2026:19:45:43 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:19:45:43 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:19:45:44 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:19:45:45 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.11.115.215 - - [27/Mar/2026:19:45:45 +0100] "POST //xmlrpc.php HTTP/1.1" 200 41
...
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-03-27 18:45:08
UTC ·
(7 months ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇩🇪
Mr-Money
2026-03-27 18:41:25
UTC ·
(7 months ago)
scenario: crowdsecurity/http-probing - events: 11
Web App Attack
Hacking
🇺🇸
agenciahypelab.com.br
2026-03-27 18:40:41
UTC ·
(7 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇧🇾
lns.bz
2026-03-27 18:36:59
UTC ·
(7 months ago)
Too many 404 requests [BY]
Web App Attack