🇧🇪
taivas.nl
2026-06-22 04:32:38
UTC ·
(4 months ago)
Many_bad_calls
Web App Attack
Anonymous
2026-06-21 16:47:00
UTC ·
(4 months ago)
"GET //wp-includes/ID3/license.txt HTTP/1.1"
"GET //feed/ HTTP/1.1"
"GET //xmlrpc.php?rsd HTTP/1.1"
"GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //web/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //wordpress/wp-includes/wlwmanifest.xml ...
show more
"GET //wp-includes/ID3/license.txt HTTP/1.1"
"GET //feed/ HTTP/1.1"
"GET //xmlrpc.php?rsd HTTP/1.1"
"GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //web/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //2021/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //test/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //site/wp-includes/wlwmanifest.xml HTTP/1.1"
"GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1"
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-06-21 16:03:33
UTC ·
(4 months ago)
🔑 Probes for xmlrpc.php everywhere
Hacking
Web App Attack
🇺🇸
mnsf
2026-06-21 15:05:56
UTC ·
(4 months ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-06-21 15:00:57
UTC ·
(4 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇳🇿
Antinson
2026-06-21 14:56:50
UTC ·
(4 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
Anonymous
2026-06-21 14:55:12
UTC ·
(4 months ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
Anonymous
2026-06-21 14:42:10
UTC ·
(4 months ago)
Attac
Brute-Force
🇬🇧
bensmithurst
2026-06-21 14:36:26
UTC ·
(4 months ago)
8.235.47.230 - - [21/Jun/2026:14:28:07 +0000] "" 400 0 "-" "-"
8.235.47.230 - - [21/Jun/2026:14:28:07 +0000] "" 400 0 "-" "-"
8.235.47.230 - - [21/Jun/2026:14:28:10 +0000] "" 400 0 "-" "-"
8.235.47.230 - - [21/Jun/2026:14:36:25 +0000] "" 400 0 "-" "- ...
show more
8.235.47.230 - - [21/Jun/2026:14:28:07 +0000] "" 400 0 "-" "-"
8.235.47.230 - - [21/Jun/2026:14:28:07 +0000] "" 400 0 "-" "-"
8.235.47.230 - - [21/Jun/2026:14:28:10 +0000] "" 400 0 "-" "-"
8.235.47.230 - - [21/Jun/2026:14:36:25 +0000] "" 400 0 "-" "-"
8.235.47.230 - - [21/Jun/2026:14:36:26 +0000] "" 400 0 "-" "-"
... [host=LAN***]
show less
Web App Attack
Anonymous
2026-06-21 14:33:03
UTC ·
(4 months ago)
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1
Hacking
Web App Attack
Anonymous
2026-06-21 14:27:56
UTC ·
(4 months ago)
8.235.47.230 - - [21/Jun/2026:16:27:55 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 5047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.235.47.230 - - [21/Jun/2026: ...
show more
8.235.47.230 - - [21/Jun/2026:16:27:55 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 5047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.235.47.230 - - [21/Jun/2026:16:27:56 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.235.47.230 - - [21/Jun/2026:16:27:56 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.235.47.230 - - [21/Jun/2026:16:27:56 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5077 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.235.47.230 - - [21/Jun/2026:16:27:56 +0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5056
...
show less
Brute-Force
Web App Attack
🇨🇭
backslash
2026-06-21 14:12:00
UTC ·
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇳🇱
wlt-blocker
2026-06-21 14:09:32
UTC ·
(4 months ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
AetherFox
2026-06-21 14:09:29
UTC ·
(4 months ago)
AetherFox VoidGuard detected: [Sun Jun 21 14:09:28.083242 2026] [authz_core:error] [pid 1554627:tid 1554636] [client 8.235.47.230:63435] AH01630: client denied by server configuration: proxy:http://[MASKED]/
[Sun Jun 21 14:09:28.083440 2026] [authz_c ...
show more
AetherFox VoidGuard detected: [Sun Jun 21 14:09:28.083242 2026] [authz_core:error] [pid 1554627:tid 1554636] [client 8.235.47.230:63435] AH01630: client denied by server configuration: proxy:http://[MASKED]/
[Sun Jun 21 14:09:28.083440 2026] [authz_core:error] [pid 1554627:tid 1554636] [client 8.235.47.230:63435] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Sun Jun 21 14:09:28.259259 2026] [authz_core:error] [pid 1554627:tid 1554646] [client 8.235.47.230:63435] AH01630: client denied by server configuration: proxy:http://[MASKED]/wp-includes/ID3/license.txt
[Sun Jun 21 14:09:28.259450 2026] [authz_core:error] [pid 1554627:tid 1554646] [client 8.235.47.230:63435] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Sun Jun 21 14:09:28.439349 2026] [authz_core:error] [pid 1554627:tid 1554632] [client 8.235.47.230:63435] AH01630: client denied by server configuration: proxy:http://[MASKED]/fee
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-21 14:06:53
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 8.235.47.230 (230.47.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 10:06:49.112517 2026] [security2:error] [pid 26510:tid 26 ...
show more
(mod_security) mod_security (id:225170) triggered by 8.235.47.230 (230.47.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 10:06:49.112517 2026] [security2:error] [pid 26510:tid 26510] [client 8.235.47.230:51899] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||doncody.disio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "doncody.disio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajfv-WTYZLltxr_Iu_hE_AAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack