🇺🇸
mnsf
2026-06-05 15:06:44
(2 weeks ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇷🇺
DZBOT
2026-06-05 14:41:48
(2 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
chronos
2026-06-05 14:34:45
(2 weeks ago)
[AUTORAVALT][[05/06/2026 - 11:34:45 -03:00 UTC]
Attack from [Google LLC]
[35.227.139.15][15.139.227. ...
show more
[AUTORAVALT][[05/06/2026 - 11:34:45 -03:00 UTC]
Attack from [Google LLC]
[35.227.139.15][15.139.227.35.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdm]
...
show less
Hacking
Web App Attack
🇳🇱
Savvii
2026-06-05 14:28:20
(2 weeks ago)
10 attempts against mh-misc-ban on mars
Web App Attack
🇩🇪
AetherFox
2026-06-05 14:27:50
(2 weeks ago)
AetherFox VoidGuard detected: [Fri Jun 05 14:27:48.940947 2026] [authz_core:error] [pid 3395879:tid ...
show more
AetherFox VoidGuard detected: [Fri Jun 05 14:27:48.940947 2026] [authz_core:error] [pid 3395879:tid 3395889] [client 35.227.139.15:57740] AH01630: client denied by server configuration: proxy:http://[MASKED]/wp-includes/ID3/license.txt
[Fri Jun 05 14:27:48.941206 2026] [authz_core:error] [pid 3395879:tid 3395889] [client 35.227.139.15:57740] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Fri Jun 05 14:27:49.093113 2026] [authz_core:error] [pid 3395879:tid 3395907] [client 35.227.139.15:57740] AH01630: client denied by server configuration: proxy:http://[MASKED]/feed/
[Fri Jun 05 14:27:49.093377 2026] [authz_core:error] [pid 3395879:tid 3395907] [client 35.227.139.15:57740] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Fri Jun 05 14:27:49.254581 2026] [authz_core:error] [pid 3395879:tid 3395901] [client 35.227.139.15:57740] AH01630: client denied by server configuration: proxy:http://5.75.
...
show less
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-05 14:24:31
(2 weeks ago)
Scraping with a high error ratio and request rate High error rate and elevated request volume target ...
show more
Scraping with a high error ratio and request rate High error rate and elevated request volume targeting cPanel servers
show less
Bad Web Bot
🇩🇪
netclix.gr
2026-06-05 14:20:13
(2 weeks ago)
(wordpress) Failed wordpress login from 35.227.139.15 (US/United States/15.139.227.35.bc.googleuserc ...
show more
(wordpress) Failed wordpress login from 35.227.139.15 (US/United States/15.139.227.35.bc.googleusercontent.com): (CF_ENABLE)
show less
Brute-Force
🇮🇱
Dolphi
2026-06-05 14:20:03
(2 weeks ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 14:18:58
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 35.227.139.15 (15.139.227.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:240335) triggered by 35.227.139.15 (15.139.227.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 10:18:54.542683 2026] [security2:error] [pid 29841:tid 29841] [client 35.227.139.15:62939] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 35.227.139.15 (+1 hits since last alert)|globalsolutions.technology|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "globalsolutions.technology"] [uri "/xmlrpc.php"] [unique_id "aiLazphmdgOrQz7Koh3XFwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-05 14:15:56
(2 weeks ago)
Web attack blocked by Wordfence on www.gerhuntjens.nl (1 hit). Reported by CRMON.
Web App Attack
🇳🇱
maxxsense
2026-06-05 14:10:46
(2 weeks ago)
(PERMBLOCK) 35.227.139.15 (US/United States/15.139.227.35.bc.googleusercontent.com) has had more tha ...
show more
(PERMBLOCK) 35.227.139.15 (US/United States/15.139.227.35.bc.googleusercontent.com) has had more than 4 temp blocks
show less
Hacking
🇺🇸
lavnet.net
2026-06-05 14:09:03
(2 weeks ago)
35.227.139.15 - - [05/Jun/2026:14:09:02 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 9422 ...
show more
35.227.139.15 - - [05/Jun/2026:14:09:02 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 9422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.227.139.15 - - [05/Jun/2026:14:09:02 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9427 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.227.139.15 - - [05/Jun/2026:14:09:02 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.227.139.15 - - [05/Jun/2026:14:09:02 +0000] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 9432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.227.139.15 - - [05/Jun/2026:14:09:02 +0000] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404
...
show less
Brute-Force
🇨🇭
backslash
2026-06-05 13:57:00
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇱
maxxsense
2026-06-05 13:55:45
(2 weeks ago)
(wordpress) Failed wordpress login from 35.227.139.15 (US/United States/15.139.227.35.bc.googleuserc ...
show more
(wordpress) Failed wordpress login from 35.227.139.15 (US/United States/15.139.227.35.bc.googleusercontent.com)
show less
Brute-Force
🇧🇾
lns.bz
2026-06-05 13:49:45
(2 weeks ago)
Too many 404 requests [BY]
Web App Attack