๐บ๐ธ
bluebrad
2026-04-26 04:25:37
(1 month ago)
Repeated malicious probing, bad bot activity, and web application attack attempts.
Port Scan
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-04-20 22:00:26
(1 month ago)
Auto-ban: 310 malicious requests on 2026-04-19 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 310 malicious requests on 2026-04-19 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
๐ณ๐ฟ
Antinson
2026-04-19 16:57:36
(1 month ago)
Scraping with a high error ratio and request rate
Bad Web Bot
๐บ๐ธ
zwebvigil
2026-04-19 16:30:20
(1 month ago)
34.68.20.85 [19/Apr/2026:09:30:19 -0700] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 2721 "-" ...
show more
34.68.20.85 [19/Apr/2026:09:30:19 -0700] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 2721 "-" port=51818 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" "-" "<host>" 791
34.68.20.85 [19/Apr/2026:09:30:19 -0700] "GET //xmlrpc.php?rsd HTTP/1.1" 404 2695 "-" port=51818 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" "-" "<host>" 1815
34.68.20.85 [19/Apr/2026:09:30:19 -0700] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2731 "-" port=51818 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "-" "-" "<host>" 587
34.68.20.85 [19/Apr/2026:09:30:19 -0700] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2729 "-" port=51818 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/5
show less
Web App Attack
๐ฉ๐ช
LRob.fr
2026-04-19 16:30:06
(1 month ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
๐ฉ๐ช
Viveronese
2026-04-19 16:29:18
(1 month ago)
HTTP vulnerability scanning
Web App Attack
๐ฉ๐ช
IVski
2026-04-19 16:27:19
(1 month ago)
IVski WAF | WordPress scanner detected - probing wp-content, xmlrpc or wp-login
Port Scan
Brute-Force
Web App Attack
๐ฎ๐ฑ
Dolphi
2026-04-19 16:20:04
(1 month ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-04-19 16:19:43
(1 month ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-04-19 16:17:24
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 34.68.20.85 (85.20.68.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.68.20.85 (85.20.68.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 12:17:19.372368 2026] [security2:error] [pid 513500:tid 513500] [client 34.68.20.85:62344] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||frogdesignmexico.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frogdesignmexico.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aeUAD10RqwghwzF40qyZjgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-04-19 16:02:52
(1 month ago)
193.406 requests in 1 hour (1mo2w5d)
Brute-Force
Bad Web Bot
Anonymous
2026-04-19 15:59:41
(1 month ago)
- - [19/Apr/2026:15:59:40 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/2" 403 712 "-" "Mozilla/5.0 ...
show more
- - [19/Apr/2026:15:59:40 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/2" 403 712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36""
- - [19/Apr/2026:15:59:40 +0000] "GET //?author=1 HTTP/2" 403 712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36""
- - [19/Apr/2026:15:59:40 +0000] "GET //?author=2 HTTP/2" 403 712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36""
show less
Web Spam
Web App Attack
Anonymous
2026-04-19 15:55:07
(1 month ago)
Bad Request de278561
Port Scan
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-04-19 15:54:49
(1 month ago)
[redacted] 34.68.20.85 - - [19/Apr/2026:17:54:48 +0200] "POST //xmlrpc.php HTTP/1.1" 403 199 "-" "Mo ...
show more
[redacted] 34.68.20.85 - - [19/Apr/2026:17:54:48 +0200] "POST //xmlrpc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.68.20.85 - - [19/Apr/2026:17:54:48 +0200] "POST //xmlrpc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.68.20.85 - - [19/Apr/2026:17:54:48 +0200] "POST //xmlrpc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.68.20.85 - - [19/Apr/2026:17:54:48 +0200] "POST //xmlrpc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.68.20.85 - - [19/Apr/2026:17:54:49 +0200] "POST //xmlrpc.php H
...
show less
Hacking
Web App Attack
Anonymous
2026-04-19 15:51:52
(1 month ago)
34.68.20.85 - - [19/Apr/2026:17:51:52 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 296 "-" ...
show more
34.68.20.85 - - [19/Apr/2026:17:51:52 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.68.20.85 - - [19/Apr/2026:17:51:52 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.0" 404 464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.68.20.85 - - [19/Apr/2026:17:51:52 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.68.20.85 - - [19/Apr/2026:17:51:52 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.68.20.85 - - [19/Apr/2026:17:51:52 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 464 "-" "Mozilla/
...
show less
Brute-Force
Web App Attack