🇦🇹
neo72
2026-05-29 13:35:05
UTC ·
(5 months ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-05-29 08:07:20
UTC ·
(5 months ago)
332.842 requests in 3 hours (3mos5d7h)
Brute-Force
Bad Web Bot
🇳🇿
Antinson
2026-05-29 08:01:23
UTC ·
(5 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇩🇪
webanyone
2026-05-29 08:00:20
UTC ·
(5 months ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇳🇱
Savvii
2026-05-29 07:48:56
UTC ·
(5 months ago)
10 attempts against mh_ha-misc-ban on choy
Brute-Force
Web App Attack
🇺🇸
S.O.B.A. Dev.
2026-05-29 07:43:44
UTC ·
(5 months ago)
Threat Blocked by BeeHive from (ASN:396982) (Network:Google LLC) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2026-05-29T07:43:44Z)
Brute-Force
Web Spam
Web App Attack
Anonymous
2026-05-29 07:40:18
UTC ·
(5 months ago)
34.48.42.52 - - [29/May/2026:09:40:17 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:40:17 +0200] "P ...
show more
34.48.42.52 - - [29/May/2026:09:40:17 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:40:17 +0200] "POST //xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:40:17 +0200] "POST //xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:40:17 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:40:18 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69
...
show less
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-05-29 07:38:01
UTC ·
(5 months ago)
(xmlrpc) Apache: Failed xmlrpc access from 34.48.42.52 (US/United States/52.42.48.34.bc.googleusercontent.com): 10 in the last 3600 secs (0-201)
Hacking
🇫🇷
Guardian
2026-05-29 07:32:35
UTC ·
(5 months ago)
Unauthorized connection attempt / Port scanning (x7)
34.48.42.52 [29/May/2026:07:32:34] "GET //wp-includes/ID3/license.txt HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:34] "GET //feed/ HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:34] "GET //xmlrpc.php?rsd HT ...
show more
Unauthorized connection attempt / Port scanning (x7)
34.48.42.52 [29/May/2026:07:32:34] "GET //wp-includes/ID3/license.txt HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:34] "GET //feed/ HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:34] "GET //xmlrpc.php?rsd HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:34] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:35] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:35] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1"
34.48.42.52 [29/May/2026:07:32:35] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1"
show less
Port Scan
Web App Attack
🇺🇸
lavnet.net
2026-05-29 07:29:27
UTC ·
(5 months ago)
34.48.42.52 - - [29/May/2026:07:29:27 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:07 ...
show more
34.48.42.52 - - [29/May/2026:07:29:27 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:07:29:27 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:07:29:27 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:07:29:27 +0000] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:07:29:27 +0000] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9425 "-"
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-05-29 07:26:05
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 34.48.42.52 (52.42.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 03:26:01.319702 2026] [security2:error] [pid 20823:tid 2087 ...
show more
(mod_security) mod_security (id:225170) triggered by 34.48.42.52 (52.42.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 03:26:01.319702 2026] [security2:error] [pid 20823:tid 20872] [client 34.48.42.52:51486] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.gilesrentalcars.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.gilesrentalcars.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahk_iQdZBZqFjXSDWjZzZAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-05-29 07:22:25
UTC ·
(5 months ago)
URL Probing: /wp1/wp-includes/wlwmanifest.xml
Web App Attack
🇫🇷
SpaceHost-Server
2026-05-29 07:15:12
UTC ·
(5 months ago)
34.48.42.52 - - [29/May/2026:09:15:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:15:10 +0200] "P ...
show more
34.48.42.52 - - [29/May/2026:09:15:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:15:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.42.52 - - [29/May/2026:09:15:12 +0200] "POST //xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Hacking
Web App Attack
🇺🇸
mnsf
2026-05-29 07:05:56
UTC ·
(5 months ago)
Too many Status 40X (14)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-29 06:55:53
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 34.48.42.52 (52.42.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 02:55:45.550103 2026] [security2:error] [pid 21299:tid 2129 ...
show more
(mod_security) mod_security (id:225170) triggered by 34.48.42.52 (52.42.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 29 02:55:45.550103 2026] [security2:error] [pid 21299:tid 21299] [client 34.48.42.52:61811] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.garantagroup.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.garantagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ahk4cf35QsW1HRQZKEXFewAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack