๐ฉ๐ช
Stefan Dreher
2026-10-25 08:32:27
(5 minutes ago)
143.244.57.86 - - [25/Oct/2026:09:32:26 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 ...
show more
143.244.57.86 - - [25/Oct/2026:09:32:26 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
143.244.57.86 - - [25/Oct/2026:09:32:26 +0100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
143.244.57.86 - - [25/Oct/2026:09:32:26 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
143.244.57.86 - - [25/Oct/2026:09:32:26 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
143.244.57.86 - - [25/Oct/2026:09:32:26 +0100] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 1
show less
Hacking
Brute-Force
๐ฎ๐น
VHosting
2026-10-25 07:50:05
(48 minutes ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
ismailk
2026-10-25 07:35:03
(1 hour ago)
WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=FR puan=100 nginx=8 wf=0 cf=0 hiz ...
show more
WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=FR puan=100 nginx=8 wf=0 cf=0 hiz=0 404cesit=0 gizliyol=0. Blocked by adaptive firewall.
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-10-25 06:48:28
(1 hour ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ต๐ฑ
Budyn
2026-10-25 06:39:41
(1 hour ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.dont-eat-the-pudding.top | URI: /.well-known/ | UA: Unknown User-Agent | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"143.244.57.86","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4ff39bc98e18c76-CDG","X-Forwarded-For":"143.244.57.86","X-Waf-Trigger":"1"}
show less
Hacking
Web App Attack
๐บ๐ธ
infra-monitor
2026-10-25 06:00:06
(2 hours ago)
Automated ban via infra-monitor: wordpress-probe, wp-sensitive-paths
Web App Attack
๐บ๐ธ
han35
2026-10-25 06:00:03
(2 hours ago)
ProtocolSecure - WP honeypot: /wp-includes/wlwmanifest.xml (kez: 5)
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-25 05:49:17
(2 hours ago)
[redacted] 143.244.57.86 - - [25/Oct/2026:06:49:16 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 30 ...
show more
[redacted] 143.244.57.86 - - [25/Oct/2026:06:49:16 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 1539 0/68820 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 443 [redacted] 143.244.57.86 - - [25/Oct/2026:06:49:16 +0100] "GET //[redacted]?rsd HTTP/1.1" 302 1539 0/87241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 443
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 05:33:38
(3 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
๐จ๐ญ
Masterpiece
2026-10-25 05:22:02
(3 hours ago)
Web scanning (http-probing), 13 requests.
Web App Attack
๐ฉ๐ช
macrob
2026-10-25 05:19:25
(3 hours ago)
2026/10/25 05:19:24 [error] 789241#789241: *7271475 access forbidden by rule, client: 143.244.57.86, ...
show more
2026/10/25 05:19:24 [error] 789241#789241: *7271475 access forbidden by rule, client: 143.244.57.86, server: binixo-vn.com, request: "GET //wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo-vn.com"
2026/10/25 05:19:24 [error] 789244#789244: *7225662 access forbidden by rule, client: 143.244.57.86, server: binixo-vn.com, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "binixo-vn.com"
2026/10/25 05:19:24 [error] 789246#789246: *7320170 access forbidden by rule, client: 143.244.57.86, server: binixo-vn.com, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo-vn.com"
...
show less
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-10-25 05:07:30
(3 hours ago)
Web vulnerability scanning
Brute-Force
Web Spam
Web App Attack
๐ซ๐ท
Baking333
2026-10-25 04:47:24
(3 hours ago)
[redacted] 143.244.57.86 - - [25/Oct/2026:05:37:51 +0100] "GET /wp-includes/[redacted] HTTP/2.0" 500 ...
show more
[redacted] 143.244.57.86 - - [25/Oct/2026:05:37:51 +0100] "GET /wp-includes/[redacted] HTTP/2.0" 500 18 "-" "-" [redacted] 143.244.57.86 - - [25/Oct/2026:05:47:22 +0100] "GET /wp-includes/Text/Diff/Engine/[redacted] HTTP/2.0" 200 18 "-" "-"
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-25 04:27:01
(4 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.budyn.xyz | URI: /.well-known/ | UA: Unknown User-Agent | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"143.244.57.86","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4fe7767bed899b5-CDG","X-Forwarded-For":"143.244.57.86","X-Waf-Trigger":"1"}
show less
Hacking
Web App Attack
๐ซ๐ฎ
Rauno Asp
2026-10-25 04:07:09
(4 hours ago)
Malicious scanning/exploit attempt detected on elbasanapartments.al (fail2ban jail: webattack)
Web App Attack