๐ง๐ช
taivas.nl
2026-09-16 04:33:39
(1 month ago)
Many_bad_calls
Web App Attack
๐ฉ๐ช
cloudmax
2026-09-15 17:01:43
(1 month ago)
Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, o ...
show more
Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt
show less
Bad Web Bot
๐ง๐ช
taivas.nl
2026-09-15 16:32:13
(1 month ago)
Bad_requests
Bad Web Bot
๐บ๐ธ
jcbriar
2026-09-15 16:22:24
(1 month ago)
Searching for vulnerable scripts
Hacking
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-15 16:22:00
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฉ๐ช
ghostwarriors
2026-09-15 16:20:17
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 16:20:15
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.150.242.128 (128.242.150.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.150.242.128 (128.242.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:20:11.081171 2026] [security2:error] [pid 9996:tid 10015] [client 34.150.242.128:63368] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.dent.mcprocapital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.dent.mcprocapital.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqlwO-n39Pd2fpPmaP9kHgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-15 16:18:21
(1 month ago)
34.150.242.128 - - [15/Sep/2026:18:18:16 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 ...
show more
34.150.242.128 - - [15/Sep/2026:18:18:16 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:18:17 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:18:18 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:18:18 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:18:16 +0200] "GET / HTTP/1.1" 301 563 "-" "Mozilla/
show less
Web App Attack
Hacking
๐ซ๐ท
Delta-shop
2026-09-15 16:14:37
(1 month ago)
PrestaShop Security Module: Calls WordPress paths probing known vulnerabilities
Web App Attack
๐บ๐ธ
kosada.com
2026-09-15 16:03:38
(1 month ago)
Repeated requests for suspicious nonexistent URLs, for example: //wordpress/wp-includes/wlwmanifest. ...
show more
Repeated requests for suspicious nonexistent URLs, for example: //wordpress/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36")
show less
Web App Attack
Anonymous
2026-09-15 16:02:25
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฏ๐ต
Valhalla
2026-09-15 16:01:44
(1 month ago)
/xmlrpc.php?rsd
Hacking
Web App Attack
๐ฉ๐ช
McClay
2026-09-15 16:00:56
(1 month ago)
HTTP-404 spam:34.150.242.128 - - [15/Sep/2026:18:00:54 +0200] "GET /wp-includes/wlwmanifest.xml HTTP ...
show more
HTTP-404 spam:34.150.242.128 - - [15/Sep/2026:18:00:54 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:00:54 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 404 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:00:54 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:00:54 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.150.242.128 - - [15/Sep/2026:18:00:54 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1050 "-
...
show less
Web App Attack
๐ฎ๐ฑ
Dolphi
2026-09-15 16:00:04
(1 month ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-15 15:53:21
(1 month ago)
Try to access /xmlrpc.php?rsd
Web App Attack