๐บ๐ธ
Ocean Ascents
2026-06-28 14:49:08
(3 weeks ago)
Probe for vulnerabilities. Path attempted: /wp-includes/ID3/license
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-28 14:42:42
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 34.140.89.244 (244.89.140.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.140.89.244 (244.89.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:42:35.594904 2026] [security2:error] [pid 2928:tid 3025] [client 34.140.89.244:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.mindgardens.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mindgardens.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akEy2y07l5XwpU1yLkq_AQAAAgQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-28 14:32:18
(3 weeks ago)
CrowdSec blocked IP for crowdsecurity/http-probing on vps_agent
Web App Attack
๐ฆ๐ฑ
router.al
2026-06-28 14:26:08
(3 weeks ago)
06/28/2026-14:26:07.858574 34.140.89.244 Protocol: 6 ET SCAN WordPress Scanner Performing Multiple R ...
show more
06/28/2026-14:26:07.858574 34.140.89.244 Protocol: 6 ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML
show less
Hacking
๐จ๐ญ
Origon
2026-06-28 14:19:30
(3 weeks ago)
http-probing - IP: 34.140.89.244 - time="2026-06-28T16:19:29+02:00" level=info msg="(555f66b4f6a745 ...
show more
http-probing - IP: 34.140.89.244 - time="2026-06-28T16:19:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.140.89.244 (BE/396982) : 4h ban on Ip 34.140.89.244" module=db
show less
Web App Attack
๐ณ๐ฟ
Antinson
2026-06-28 14:10:49
(3 weeks ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
๐ฌ๐ง
Apache
2026-06-28 14:10:09
(3 weeks ago)
(mod_security) mod_security (id:210410) triggered by 34.140.89.244 (BE/Belgium/244.89.140.34.bc.goog ...
show more
(mod_security) mod_security (id:210410) triggered by 34.140.89.244 (BE/Belgium/244.89.140.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐บ๐ธ
oralunal
2026-06-28 13:58:21
(3 weeks ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-06-28 13:53:18
(3 weeks ago)
34.140.89.244 - - [28/Jun/2026:15:53:18 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.140.89.244 - - [28/Jun/2026:15:53:18 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ฆ๐บ
aranguren.org
2026-06-28 13:48:04
(3 weeks ago)
34.140.89.244 - - [28/Jun/2026:23:48:03 +1000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.140.89.244 - - [28/Jun/2026:23:48:03 +1000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.140.89.244 - - [28/Jun/2026:23:48:03 +1000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.140.89.244 - - [28/Jun/2026:23:48:03 +1000] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-06-28 13:45:51
(3 weeks ago)
34.140.89.244 - - [28/Jun/2026:13:45:50 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 436 " ...
show more
34.140.89.244 - - [28/Jun/2026:13:45:50 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-06-28 13:45:07
(3 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ฌ๐ง
myintarweb
2026-06-28 13:37:30
(3 weeks ago)
34.140.89.244 - - [28/Jun/2026:14:37:29 +0100] 443 "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 6 ...
show more
34.140.89.244 - - [28/Jun/2026:14:37:29 +0100] 443 "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 6344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Bad Web Bot
Web App Attack