๐จ๐ญ
rt
2026-09-03 10:21:57
(1 month ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-03 10:19:24
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 10:11:34
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.29.37.31 (31.37.29.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.29.37.31 (31.37.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 06:11:28.345420 2026] [security2:error] [pid 1207:tid 1207] [client 34.29.37.31:62035] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.darkalleyproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.darkalleyproductions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aplH0L8xkZFbXFYW_bvfVQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-03 10:05:25
(1 month ago)
Abuse Detected (14)
Brute-Force
Web App Attack
Anonymous
2026-09-03 10:04:07
(1 month ago)
CrowdSec blocked IP for crowdsecurity/http-probing on vps_agent
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-03 09:58:14
(1 month ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐ณ๐ฑ
ipoac.nl
2026-09-03 09:58:13
(1 month ago)
-:443 34.29.37.31 - - [03/Sep/2026:11:58:11 +0200] - "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
-:443 34.29.37.31 - - [03/Sep/2026:11:58:11 +0200] - "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 1967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-03 09:51:02
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.29.37.31 (31.37.29.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.29.37.31 (31.37.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 05:50:55.429529 2026] [security2:error] [pid 18006:tid 18006] [client 34.29.37.31:56499] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.knoxworx.shop|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.knoxworx.shop"] [uri "/wp-json/wp/v2/users/"] [unique_id "aplC_ww2puBpUI6npEcPYQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-09-03 09:45:47
(1 month ago)
Excessive HTTP request rate
Web App Attack
๐ซ๐ท
pm33
2026-09-03 09:43:05
(1 month ago)
Excessive crawling HTTP 404
Web App Attack
๐จ๐ญ
backslash
2026-09-03 09:42:00
(1 month ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
๐จ๐ญ
zynex
2026-09-03 09:38:09
(1 month ago)
URL Probing: /2019/wp-includes/wlwmanifest.xml
Web App Attack
๐ต๐ฑ
ketovoila.pl
2026-09-03 09:30:43
(1 month ago)
ketovoila.pl WordPress reconnaissance scan: hits=12; unique_paths=6; sample_paths=/wp1/wp-includes/w ...
show more
ketovoila.pl WordPress reconnaissance scan: hits=12; unique_paths=6; sample_paths=/wp1/wp-includes/wlwmanifest.xml,/shop/wp-includes/wlwmanifest.xml,/wp-includes/wlwmanifest.xml,/2019/wp-includes/wlwmanifest.xml,/blog/wp-includes/wlwmanifest.xml; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"; window=2026-09-03T09:30:43Z..2026-09-03T09:30:44Z HTTP methods: GET (12).
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
ketovoila.pl
2026-09-03 09:30:43
(1 month ago)
ketovoila.pl WordPress reconnaissance scan: hits=21; unique_paths=11; sample_paths=/cms/wp-includes/ ...
show more
ketovoila.pl WordPress reconnaissance scan: hits=21; unique_paths=11; sample_paths=/cms/wp-includes/wlwmanifest.xml,/wp2/wp-includes/wlwmanifest.xml,/wp1/wp-includes/wlwmanifest.xml,/shop/wp-includes/wlwmanifest.xml,/wp-includes/wlwmanifest.xml,/website/wp-includes/wlwmanifest.xml,/news/wp-includes/wlwmanifest.xml,/2019/wp-includes/wlwmanifest.xml,/blog/wp-includes/wlwmanifest.xml,/web/wp-includes/wlwmanifest.xml; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"; window=2026-09-03T09:30:43Z..2026-09-03T09:30:44Z HTTP methods: GET (21).
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
ne1for23
2026-09-03 09:26:42
(1 month ago)
34.29.37.31 - - [03/Sep/2026:09:26:41 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 555 "-" "Mozilla/5. ...
show more
34.29.37.31 - - [03/Sep/2026:09:26:41 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Hacking
Web App Attack