🇦🇹
neo72
2026-06-28 17:06:06
(3 days ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-06-28 15:00:30
(3 days ago)
19.987 requests in 1 hour (3mos1w5d)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-28 14:50:59
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 35.204.137.163 (163.137.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 35.204.137.163 (163.137.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:50:55.118323 2026] [security2:error] [pid 16676:tid 16676] [client 35.204.137.163:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||package.cloudex.click|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "package.cloudex.click"] [uri "/wp-json/wp/v2/users/"] [unique_id "akE0z60Qd04H6B0jFRuMaAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
aks4226
2026-06-28 14:50:53
(3 days ago)
Bot search, attacking common web applications.
Web App Attack
🇳🇱
ipoac.nl
2026-06-28 14:49:34
(3 days ago)
-:443 35.204.137.163 - - [28/Jun/2026:16:49:33 +0200] - "GET //xmlrpc.php?rsd HTTP/1.1" 403 1964 "-" ...
show more
-:443 35.204.137.163 - - [28/Jun/2026:16:49:33 +0200] - "GET //xmlrpc.php?rsd HTTP/1.1" 403 1964 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
🇳🇱
Site.eu
2026-06-28 14:47:55
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇳🇱
lns.bz
2026-06-28 14:46:43
(3 days ago)
Too many 404 requests [DOOZ]
Web App Attack
🇨🇭
Origon
2026-06-28 14:46:39
(3 days ago)
http-probing - IP: 35.204.137.163 - time="2026-06-28T16:46:38+02:00" level=info msg="(555f66b4f6a74 ...
show more
http-probing - IP: 35.204.137.163 - time="2026-06-28T16:46:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 35.204.137.163 (NL/396982) : 4h ban on Ip 35.204.137.163" module=db
show less
Web App Attack
🇩🇪
ITSNF
2026-06-28 14:45:02
(3 days ago)
Blocked by os-abuseipdb; 9 hits, proto=tcp, ports=80
Port Scan
Hacking
🇳🇴
jad-abuse
2026-06-28 14:44:16
(3 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 2 sensor(s); 29 hits.
show less
Brute-Force
Web App Attack
2026-06-28 14:42:34
(3 days ago)
35.204.137.163 - - [28/Jun/2026:14:42:33 +0000] "GET /landing-owlbee/uk/wp-includes/ID3/license.txt ...
show more
35.204.137.163 - - [28/Jun/2026:14:42:33 +0000] "GET /landing-owlbee/uk/wp-includes/ID3/license.txt HTTP/1.1" 404 7822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
masterguru
2026-06-28 14:38:21
(3 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-147)
Hacking
🇩🇪
ger-stg-sifi1
2026-06-28 14:34:53
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇪🇸
pipeline.es
2026-06-28 14:27:37
(3 days ago)
Web scanning / probing for vulnerable paths | URL: //wp-includes/ID3/license.txt | Evidence: origens ...
show more
Web scanning / probing for vulnerable paths | URL: //wp-includes/ID3/license.txt | Evidence: origens-douro.com 35.204.137.163 - - [28/Jun/2026:16:26:20 +0200] \"GET //wp-includes/ID3/license.txt HTTP/1.1\" 404 21035 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36\" GEOIP_COUNTRY_CODE=NL | ASN: GOOGLE-CLOUD-PLATFORM | Country: NL
show less
Port Scan
Web App Attack
🇦🇺
aranguren.org
2026-06-28 14:16:41
(3 days ago)
35.204.137.163 - - [29/Jun/2026:00:16:40 +1000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 996 ...
show more
35.204.137.163 - - [29/Jun/2026:00:16:40 +1000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 996 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.204.137.163 - - [29/Jun/2026:00:16:40 +1000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.204.137.163 - - [29/Jun/2026:00:16:40 +1000] "GET /feed/ HTTP/1.1" 404 996 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.204.137.163 - - [29/Jun/2026:00:16:40 +1000] "GET /feed/ HTTP/1.1" 404 992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.204.137.163 - - [29/Jun/2026:00:16:40 +1000] "GET /xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
...
show less
Bad Web Bot