🇨🇦
zXero
2026-06-18 21:15:28
(1 day ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇳🇿
Antinson
2026-06-16 10:16:10
(4 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
2026-06-16 10:16:03
(4 days ago)
Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.
Web App Attack
🇮🇱
Dolphi
2026-06-16 09:52:12
(4 days ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇦
URAN Publishing Service
2026-06-16 09:47:10
(4 days ago)
34.19.75.160 - - [16/Jun/2026:12:47:06 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 683 "- ...
show more
34.19.75.160 - - [16/Jun/2026:12:47:06 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.19.75.160 - - [16/Jun/2026:12:47:09 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
🇷🇺
DZBOT
2026-06-16 09:44:32
(4 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 09:41:27
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.19.75.160 (160.75.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.19.75.160 (160.75.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:41:23.619247 2026] [security2:error] [pid 22002:tid 22002] [client 34.19.75.160:50011] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.legacy-insight.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.legacy-insight.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajEaQy-2YmStjUS94BLrVgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-06-16 09:38:54
(4 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/160.75.19.34.bc.googleusercontent.com
Web App Attack
🇺🇸
masterguru
2026-06-16 09:34:58
(4 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-147)
Hacking
🇨🇦
zXero
2026-06-16 09:31:51
(4 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇺🇸
integrantservices.com
2026-06-16 09:30:01
(4 days ago)
(wordpress) Failed wordpress login from 34.19.75.160 (US/United States/160.75.19.34.bc.googleusercon ...
show more
(wordpress) Failed wordpress login from 34.19.75.160 (US/United States/160.75.19.34.bc.googleusercontent.com)
show less
Brute-Force
🇨🇭
Origon
2026-06-16 09:25:48
(4 days ago)
http-probing - IP: 34.19.75.160 - time="2026-06-16T11:25:48+02:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 34.19.75.160 - time="2026-06-16T11:25:48+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.19.75.160 (US/396982) : 4h ban on Ip 34.19.75.160" module=db
show less
Web App Attack
🇩🇪
pltcldvlpr
2026-06-16 09:24:23
(4 days ago)
CMS/framework probe: 34.19.75.160 - - [16/Jun/2026:11:24:23 +0200] "GET //wp-includes/ID3/license.tx ...
show more
CMS/framework probe: 34.19.75.160 - - [16/Jun/2026:11:24:23 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 400 141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" asn=396982 org="Google LLC" country=US
...
show less
Web App Attack
🇳🇱
Savvii
2026-06-16 09:22:32
(4 days ago)
10 attempts against mh-misc-ban on lunar
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 09:20:15
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 34.19.75.160 (160.75.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.19.75.160 (160.75.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 05:20:10.533738 2026] [security2:error] [pid 17998:tid 17998] [client 34.19.75.160:64198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||lahamradio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lahamradio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajEVSmpLVGRsiBzqcY5lBgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack