🇳🇱
homeshowdomain.nl
2026-05-07 21:59:25
UTC ·
(6 months ago)
Auto-ban: 216 malicious requests on 2026-05-06 (e.g., env/backup probes, brute-force, or error bursts).
Web App Attack
SSH
Hacking
🇫🇷
SpaceHost-Server
2026-05-06 22:36:23
UTC ·
(6 months ago)
Brute-Force
Web App Attack
🇩🇪
dbmwebdesign
2026-05-06 04:20:55
UTC ·
(6 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
2026-05-06 04:16:55
UTC ·
(6 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
2026-05-06 04:14:17
UTC ·
(6 months ago)
34.45.109.242 - - [06/May/2026:01:14:16 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 1807 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2 ...
show more
34.45.109.242 - - [06/May/2026:01:14:16 -0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 1807 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:01:14:16 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 1807 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:01:14:16 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1807 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:01:14:16 -0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1807 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:01:14:16 -0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1807 "
...
show less
Port Scan
🇮🇱
Dolphi
2026-05-06 04:12:14
UTC ·
(6 months ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
2026-05-06 04:06:38
UTC ·
(6 months ago)
[redacted] 34.45.109.242 - - [06/May/2026:06:06:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.45.109.242 - - [06/ ...
show more
[redacted] 34.45.109.242 - - [06/May/2026:06:06:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.45.109.242 - - [06/May/2026:06:06:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.45.109.242 - - [06/May/2026:06:06:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.45.109.242 - - [06/May/2026:06:06:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.45.109.242 - - [06/May/2026:06:06:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Moz
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-06 04:00:23
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 34.45.109.242 (242.109.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 00:00:17.572782 2026] [security2:error] [pid 24685:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 34.45.109.242 (242.109.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 00:00:17.572782 2026] [security2:error] [pid 24685:tid 24734] [client 34.45.109.242:64751] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||georgementz.com.aafm.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgementz.com.aafm.us"] [uri "/wp-json/wp/v2/users/"] [unique_id "afq80WnAQjBvlllmZI_eOQAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-06 04:00:22
UTC ·
(6 months ago)
34.45.109.242 - - [06/May/2026:06:00:22 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/202 ...
show more
34.45.109.242 - - [06/May/2026:06:00:22 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:06:00:22 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:06:00:22 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:06:00:22 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.45.109.242 - - [06/May/2026:06:00:22 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 286 "-"
...
show less
Brute-Force
Web App Attack
🇱🇹
Evag Touf
2026-05-06 03:49:04
UTC ·
(6 months ago)
(wordpress) Failed wordpress login from 34.45.109.242 (US/United States/-)
Brute-Force
2026-05-06 03:35:05
UTC ·
(6 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇿
Antinson
2026-05-06 03:28:05
UTC ·
(6 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
Site.eu
2026-05-06 03:26:17
UTC ·
(6 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇧🇪
cmbplf
2026-05-06 03:26:06
UTC ·
(6 months ago)
96.580 requests with url.path */xmlrpc.php
96.580 requests with url.path //xmlrpc.php
3.914 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-06 03:25:37
UTC ·
(6 months ago)
(mod_security) mod_security (id:225170) triggered by 34.45.109.242 (242.109.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 23:25:34.774095 2026] [security2:error] [pid 4172:tid 4 ...
show more
(mod_security) mod_security (id:225170) triggered by 34.45.109.242 (242.109.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 05 23:25:34.774095 2026] [security2:error] [pid 4172:tid 4172] [client 34.45.109.242:49888] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||eileensbakeryandcafe.cathrynn.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "eileensbakeryandcafe.cathrynn.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "afq0rgL3MkPkAw3rJRSJdgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack