🇺🇸
oralunal
2026-06-19 15:30:45
(1 day ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 15:17:01
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 34.178.138.43 (43.138.178.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.178.138.43 (43.138.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 11:16:55.858498 2026] [security2:error] [pid 21888:tid 21888] [client 34.178.138.43:62262] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mail.brytonmarsh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mail.brytonmarsh.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajVdZ_98FiTSuV4vdrahIgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-06-19 15:15:12
(1 day ago)
34.178.138.43 - - [19/Jun/2026:17:15:12 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.178.138.43 - - [19/Jun/2026:17:15:12 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇨🇭
Origon
2026-06-19 15:14:26
(1 day ago)
http-probing - IP: 34.178.138.43 - time="2026-06-19T17:14:26+02:00" level=info msg="(555f66b4f6a745 ...
show more
http-probing - IP: 34.178.138.43 - time="2026-06-19T17:14:26+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.178.138.43 (NL/396982) : 4h ban on Ip 34.178.138.43" module=db
show less
Web App Attack
🇳🇱
tmiland
2026-06-19 15:06:41
(1 day ago)
(wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 34.178.138.43 (43.138.178.34.bc.googleuserc ...
show more
(wordpress_wlwmanifest) WordPress wlwmanifest.xml Attack 34.178.138.43 (43.138.178.34.bc.googleusercontent.com): 3 in the last 3600 secs; IP: 34.178.138.43; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.178.138.43 - - [19/Jun/2026:17:06:39 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.178.138.43 - - [19/Jun/2026:17:06:39 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.178.138.43 - - [19/Jun/2026:17:06:39 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Brute-Force
🇨🇭
ca
2026-06-19 15:06:06
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
Major Hostility
2026-06-19 15:00:28
(1 day ago)
"GET /wp-includes/ID3/license.txt HTTP/1.1" 404
"GET /feed/ HTTP/1.1" 404
"GET /xmlrpc.php?rsd HTTP/ ...
show more
"GET /wp-includes/ID3/license.txt HTTP/1.1" 404
"GET /feed/ HTTP/1.1" 404
"GET /xmlrpc.php?rsd HTTP/1.1" 403
"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /cms/wp-includes%2
show less
Web App Attack
🇳🇿
Antinson
2026-06-19 15:00:22
(1 day ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot
🇳🇱
Savvii
2026-06-19 14:59:07
(1 day ago)
10 attempts against mh_ha-misc-ban on ethyl
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-19 14:58:28
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 14:48:42
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 34.178.138.43 (43.138.178.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.178.138.43 (43.138.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 10:48:35.556793 2026] [security2:error] [pid 31425:tid 31425] [client 34.178.138.43:60644] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lyldevelopers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lyldevelopers.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajVWw1lLiBphc58dQh6HvgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-19 14:45:35
(1 day ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/43.138.178.34.bc.googleusercontent.com
Web App Attack
🇩🇪
webanyone
2026-06-19 14:45:33
(1 day ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇳🇱
Savvii
2026-06-19 14:40:35
(1 day ago)
10 attempts against mh-misc-ban on frost
Web App Attack
🇺🇸
Dolphi
2026-06-19 14:40:05
(1 day ago)
POST //xmlrpc.php
Brute-Force
Web App Attack