🇳🇱
homeshowdomain.nl
2026-01-31 23:01:26
(8 months ago)
Auto-ban: 460 malicious requests on 2026-01-30 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 460 malicious requests on 2026-01-30 (e.g., env/backup probes, brute-force, or error bursts).
show less
Hacking
Web App Attack
SSH
🇧🇪
taivas.nl
2026-01-31 05:32:29
(8 months ago)
Many_bad_calls
Web App Attack
🇨🇦
polycoda
2026-01-30 18:09:19
(8 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 🔐 WordPress Login Brute Force (20X or 30X) (D ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 🔐 WordPress Login Brute Force (20X or 30X) (Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-01-30 18:02:53
(8 months ago)
46.063 requests in 1 hour (2mos3d12h)
Brute-Force
Bad Web Bot
🇧🇪
taivas.nl
2026-01-30 18:02:12
(8 months ago)
Bad_requests
Bad Web Bot
🇩🇪
webanyone
2026-01-30 18:00:16
(8 months ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇦🇱
Lungu Stefan Gabriel
2026-01-30 17:59:40
(8 months ago)
Node: AL-01 | Jail: https-port-443 | Rate-Limit (Port 443) - Rate-limit/abuse attack on port 443. Re ...
show more
Node: AL-01 | Jail: https-port-443 | Rate-Limit (Port 443) - Rate-limit/abuse attack on port 443. Reported by fail2ban.
show less
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-30 17:58:21
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 35.224.158.66 (66.158.224.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 35.224.158.66 (66.158.224.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 12:58:14.743336 2026] [security2:error] [pid 31192:tid 31192] [client 35.224.158.66:60907] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.lumentravel.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.lumentravel.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXzxNgBlgbc74sBy7TkfYwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-01-30 17:47:16
(8 months ago)
WebAttack or semilar from 35.224.158.66
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-01-30 17:37:55
(8 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa01]
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-30 17:30:30
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 35.224.158.66 (66.158.224.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 35.224.158.66 (66.158.224.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 12:30:21.817414 2026] [security2:error] [pid 8703:tid 8703] [client 35.224.158.66:55723] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.liwlra.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.liwlra.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "aXzqrci2-2Kv91IPjR-GSgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-01-30 17:26:29
(8 months ago)
Blocked user enumeration attempt
Hacking
🇺🇸
lnklnx
2026-01-30 17:16:44
(8 months ago)
www.lincolnclan.com:443 35.224.158.66 - - [30/Jan/2026:11:16:42 -0600] "GET //wp-includes/wlwmanifes ...
show more
www.lincolnclan.com:443 35.224.158.66 - - [30/Jan/2026:11:16:42 -0600] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 401 801 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Web App Attack
🇩🇪
grassau.com
2026-01-30 17:14:45
(8 months ago)
(wordpress) Failed wordpress login from 35.224.158.66 (US/United States/66.158.224.35.bc.googleuserc ...
show more
(wordpress) Failed wordpress login from 35.224.158.66 (US/United States/66.158.224.35.bc.googleusercontent.com)
show less
Brute-Force
🇮🇪
Jim Keir
2026-01-30 17:14:31
(8 months ago)
2026-01-30 17:14:30 35.224.158.66 File scanning, blocking 35.224.158.66 for 5 minutes
Web App Attack