🇺🇸
lostswordfish.com
2026-03-02 11:10:05
UTC ·
(8 months ago)
Wordfence waf block on madesimpleskincare
Web App Attack
🇫🇷
masterguru
2026-03-02 11:09:40
UTC ·
(8 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.232.110.78 (US/United States/78.110.232.35.bc.googleusercontent.com): 1 in the last 3600 secs (0-201)
Hacking
🇧🇾
lns.bz
2026-03-02 11:05:20
UTC ·
(8 months ago)
Too many 404 requests [BY]
Web App Attack
🇩🇪
Blexyel
2026-03-02 11:04:48
UTC ·
(8 months ago)
35.232.110.78 - - [02/Mar/2026:11:04:44 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-03-02 10:55:28
UTC ·
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 35.232.110.78 (78.110.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 05:55:22.788755 2026] [security2:error] [pid 5081:tid 5 ...
show more
(mod_security) mod_security (id:225170) triggered by 35.232.110.78 (78.110.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 05:55:22.788755 2026] [security2:error] [pid 5081:tid 5101] [client 35.232.110.78:61609] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||whitecrosslibrary.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "whitecrosslibrary.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaVsmhy3G9Ki9IngCtHf_wAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-03-02 10:46:55
UTC ·
(8 months ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2026-03-02 10:44:50
UTC ·
(8 months ago)
"GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /xmlrpc.php?rsd HTTP/1.1" 403
"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET ...
show more
"GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /xmlrpc.php?rsd HTTP/1.1" 403
"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /media/wp-includes/wlwmanifest.xml HTTP/1.1" 404
show less
Web App Attack
🇳🇿
Antinson
2026-03-02 10:41:22
UTC ·
(8 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
Anonymous
2026-03-02 10:36:46
UTC ·
(8 months ago)
[redacted] 35.232.110.78 - - [02/Mar/2026:11:36:40 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.232.110.78 - - [02 ...
show more
[redacted] 35.232.110.78 - - [02/Mar/2026:11:36:40 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.232.110.78 - - [02/Mar/2026:11:36:40 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.232.110.78 - - [02/Mar/2026:11:36:41 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.232.110.78 - - [02/Mar/2026:11:36:42 +0100] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 35.232.110.78 - - [02/Mar/2026:11:36:42 +0100] "POST //xm
...
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-03-02 10:34:08
UTC ·
(8 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇧🇪
taivas.nl
2026-03-02 10:32:16
UTC ·
(8 months ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-02 10:30:17
UTC ·
(8 months ago)
(mod_security) mod_security (id:225170) triggered by 35.232.110.78 (78.110.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 05:30:12.906585 2026] [security2:error] [pid 21139:tid ...
show more
(mod_security) mod_security (id:225170) triggered by 35.232.110.78 (78.110.232.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 02 05:30:12.906585 2026] [security2:error] [pid 21139:tid 21139] [client 35.232.110.78:54691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||madisonjazzorchestra.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "madisonjazzorchestra.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aaVmtPuJyjK7Q_5-XvOaSAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-03-02 10:26:32
UTC ·
(8 months ago)
8.138 requests with url.path */xmlrpc.php
1.069 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
Anonymous
2026-03-02 10:24:02
UTC ·
(8 months ago)
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1, GET //?author=2 HTTP/1.1, GET / HTTP/1.1
Hacking
Web App Attack
🇮🇹
VHosting
2026-03-02 10:20:09
UTC ·
(8 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack