🇧🇷
dominioz
2026-07-30 14:38:18
(18 hours ago)
2026-07-30 14:37:30 GET /wp-includes/wlwmanifest.xml - - 35.227.71.162 HTTP/1.1 Mozilla/5.0+(Windows ...
show more
2026-07-30 14:37:30 GET /wp-includes/wlwmanifest.xml - - 35.227.71.162 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 404 5332
2026-07-30 14:37:30 GET /xmlrpc.php rsd - 35.227.71.162 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 404 5111
2026-07-30 14:37:30 GET /blog/wp-includes/wlwmanifest.xml - - 35.227.71.162 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 404 5342
2026-07-30 14:37:30 GET /web/wp-includes/wlwmanifest.xml - - 35.227.71.162 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/89.0.4389.114+Safari/537.36 - 404 5340
...
show less
Web App Attack
🇧🇪
taivas.nl
2026-07-30 14:32:14
(18 hours ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-30 14:27:19
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 35.227.71.162 (162.71.227.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 35.227.71.162 (162.71.227.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 10:27:15.572819 2026] [security2:error] [pid 1427598:tid 1427598] [client 35.227.71.162:60145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.constructionloansfunding.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.constructionloansfunding.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "amtfQ_jVFnqwLm6jsB7sSgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-07-30 14:24:51
(18 hours ago)
8.018 requests with url.path //xmlrpc.php
7.921 requests with url.path */xmlrpc.php
1.114 request ...
show more
8.018 requests with url.path //xmlrpc.php
7.921 requests with url.path */xmlrpc.php
1.114 requests with url.path */wp-includes/wlwmanifest.xml
show less
Brute-Force
Bad Web Bot
🇩🇪
wlt-blocker
2026-07-30 14:18:55
(18 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
big-cloud.nl
2026-07-30 14:16:43
(18 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇮🇹
VHosting
2026-07-30 14:15:08
(18 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇵🇫
www.gregorymariani.com
2026-07-30 14:14:13
(18 hours ago)
35.227.71.162 - - [30/Jul/2026:14:14:12 +0000] "GET / HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT ...
show more
35.227.71.162 - - [30/Jul/2026:14:14:12 +0000] "GET / HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 592 0.000 [default-comfy-mars-service-80] [] - - - - 1ed4396c27892602a3d2623f139f49ca
35.227.71.162 - - [30/Jul/2026:14:14:12 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 620 0.000 [default-comfy-mars-service-80] [] - - - - 4b42cc3a73b6e7dd9ceef849ef879443
35.227.71.162 - - [30/Jul/2026:14:14:12 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 607 0.000 [default-comfy-mars-service-80] [] - - - - 8258ca2943be2961f88fbdffe1e64faa
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-07-30 14:10:21
(18 hours ago)
(mod_security) mod_security (id:225170) triggered by 35.227.71.162 (162.71.227.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 35.227.71.162 (162.71.227.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 10:10:14.529173 2026] [security2:error] [pid 1446230:tid 1446251] [client 35.227.71.162:57336] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||colegiopiramide.edu.gt|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "colegiopiramide.edu.gt"] [uri "/wp-json/wp/v2/users/"] [unique_id "amtbRmdSXrBTFkriBFCRKAAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-07-30 14:10:02
(18 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-07-30 14:09:46
(18 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇿🇦
Tokolosh Hunters
2025-07-24 08:54:47
(1 year ago)
AutoBlockWindow-Known bad useragent query-2025-07-24 08:54:46
Bad Web Bot