🇳🇱
homeshowdomain.nl
2026-02-25 22:59:39
UTC ·
(8 months ago)
Auto-ban: 222 malicious requests on 2026-02-24 (e.g., env/backup probes, brute-force, or error bursts).
Web App Attack
SSH
Hacking
🇨🇭
Elysium Security
2026-02-25 03:45:43
UTC ·
(8 months ago)
Mass scanning for Web CVE
Web App Attack
Anonymous
2026-02-24 13:11:05
UTC ·
(8 months ago)
Web app attack and vulnerability scan detected from IIS logs
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-02-24 12:22:16
UTC ·
(8 months ago)
sle-7 : Trying access unauthorized files/dir=>//wp-includes/wlwmanifest.xml
Hacking
🇨🇭
dalslab ltd
2026-02-24 12:19:05
UTC ·
(8 months ago)
[24/Feb/2026:13:19:03 +0100] - 404 404 - GET http search.dalslab.com "/wp-includes/wlwmanifest.xml" [Client 34.16.43.81] [Length 4634] [Gzip -] [Sent-to 10.1.1.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro ...
show more
[24/Feb/2026:13:19:03 +0100] - 404 404 - GET http search.dalslab.com "/wp-includes/wlwmanifest.xml" [Client 34.16.43.81] [Length 4634] [Gzip -] [Sent-to 10.1.1.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
[24/Feb/2026:13:19:04 +0100] - 404 404 - GET http search.dalslab.com "/xmlrpc.php?rsd" [Client 34.16.43.81] [Length 4634] [Gzip -] [Sent-to 10.1.1.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
[24/Feb/2026:13:19:04 +0100] - 404 404 - GET http search.dalslab.com "/blog/wp-includes/wlwmanifest.xml" [Client 34.16.43.81] [Length 4634] [Gzip -] [Sent-to 10.1.1.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-"
[24/Feb/2026:13:19:05 +0100] - 404 404 - GET http search.dalslab.com "/web/wp-includes/wlwmanifest.xml" [Client 34.16.43.81] [Length 4634] [Gzip -] [S
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-02-24 12:14:50
UTC ·
(8 months ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇺🇸
bigwavedave
2026-02-24 12:08:23
UTC ·
(8 months ago)
Wordpress Attack
Web App Attack
🇵🇱
webadmin
2026-02-24 12:08:15
UTC ·
(8 months ago)
2026/02/24 13:08:14 [error] 3754885#3754885: *158445 open() "/var/www/saisolutions.pl/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 34.16.43.81, server: saisolutions.pl, request: "GET /wp-includes/wlwmanifest.xml HTTP/1. ...
show more
2026/02/24 13:08:14 [error] 3754885#3754885: *158445 open() "/var/www/saisolutions.pl/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 34.16.43.81, server: saisolutions.pl, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "saisolutions.pl"
2026/02/24 13:08:14 [error] 3754885#3754885: *158445 open() "/var/www/saisolutions.pl/xmlrpc.php" failed (2: No such file or directory), client: 34.16.43.81, server: saisolutions.pl, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "saisolutions.pl"
2026/02/24 13:08:14 [error] 3754885#3754885: *158445 open() "/var/www/saisolutions.pl/blog/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 34.16.43.81, server: saisolutions.pl, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "saisolutions.pl"
2026/02/24 13:08:14 [error] 3754885#3754885: *158445 open() "/var/www/saisolutions.pl/web/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 34.16.43.81, server:
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 12:03:09
UTC ·
(8 months ago)
(mod_security) mod_security (id:240335) triggered by 34.16.43.81 (81.43.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 07:03:06.066283 2026] [security2:error] [pid 29815:tid 2981 ...
show more
(mod_security) mod_security (id:240335) triggered by 34.16.43.81 (81.43.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 07:03:06.066283 2026] [security2:error] [pid 29815:tid 29815] [client 34.16.43.81:53541] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 34.16.43.81 (+1 hits since last alert)|www.solventtrapco.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.solventtrapco.com"] [uri "/xmlrpc.php"] [unique_id "aZ2Tekn71TD173QFn-1NQAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-02-24 12:02:53
UTC ·
(8 months ago)
Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Web App Attack
🇧🇪
cmbplf
2026-02-24 12:00:14
UTC ·
(8 months ago)
28.328 requests in 1 hour (1mo1w4d)
Brute-Force
Bad Web Bot
Anonymous
2026-02-24 11:59:18
UTC ·
(8 months ago)
Logfile match
Web App Attack
🇩🇪
konseptit
2026-02-24 11:55:17
UTC ·
(8 months ago)
(wordpress) Failed wordpress login from 34.16.43.81 (US/United States/81.43.16.34.bc.googleusercontent.com)
Brute-Force
🇨🇭
backslash
2026-02-24 11:48:00
UTC ·
(8 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-24 11:46:23
UTC ·
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 34.16.43.81 (81.43.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 06:46:17.209671 2026] [security2:error] [pid 28679:tid 2867 ...
show more
(mod_security) mod_security (id:225170) triggered by 34.16.43.81 (81.43.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 06:46:17.209671 2026] [security2:error] [pid 28679:tid 28679] [client 34.16.43.81:61669] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||snowrideadventures.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "snowrideadventures.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ2PiYlJqEvRGSCK1Ewn-wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack