๐ซ๐ท
SpaceHost-Server
2026-05-02 22:25:30
(1 month ago)
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-05-01 22:25:26
(1 month ago)
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-04-14 22:25:04
(2 months ago)
Brute-Force
Web App Attack
๐บ๐ธ
rdpguard.com
2026-04-14 16:29:35
(2 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ซ๐ท
Baking333
2026-04-14 14:12:15
(2 months ago)
[redacted] 102.165.48.83 - - [14/Apr/2026:15:12:13 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1 ...
show more
[redacted] 102.165.48.83 - - [14/Apr/2026:15:12:13 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 5297 0/56457 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 102.165.48.83 - - [14/Apr/2026:15:12:13 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1569 0/41456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-04-14 13:27:39
(2 months ago)
10 attempts against mh-misc-ban on kiwi
Web App Attack
๐ซ๐ท
Baking333
2026-04-14 11:49:35
(2 months ago)
[redacted] 102.165.48.83 - - [14/Apr/2026:12:49:33 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1 ...
show more
[redacted] 102.165.48.83 - - [14/Apr/2026:12:49:33 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 5297 0/45815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 102.165.48.83 - - [14/Apr/2026:12:49:33 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1569 0/450325 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-04-14 09:47:21
(2 months ago)
2026/04/14 09:47:19 [error] 449648#449648: *150511278 access forbidden by rule, client: 102.165.48.8 ...
show more
2026/04/14 09:47:19 [error] 449648#449648: *150511278 access forbidden by rule, client: 102.165.48.83, server: binixo.pl, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "binixo.pl"
2026/04/14 09:47:20 [error] 449648#449648: *150514131 access forbidden by rule, client: 102.165.48.83, server: binixo.pl, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "binixo.pl"
2026/04/14 09:47:20 [error] 449647#449647: *150520633 access forbidden by rule, client: 102.165.48.83, server: binixo.pl, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "binixo.pl"
...
show less
Web App Attack
๐บ๐ธ
Major Hostility
2026-04-14 09:44:50
(2 months ago)
"GET /wp-includes/ID3/license.txt HTTP/1.1" 404
"GET /feed/ HTTP/1.1" 404
"GET /xmlrpc.php?rsd HTTP/ ...
show more
"GET /wp-includes/ID3/license.txt HTTP/1.1" 404
"GET /feed/ HTTP/1.1" 404
"GET /xmlrpc.php?rsd HTTP/1.1" 403
"GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /2021/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /test/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404
"GET /cms/wp-includes%2
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-04-14 09:39:05
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ง๐ช
cmbplf
2026-04-14 09:27:08
(2 months ago)
56.527 requests with url.path */xmlrpc.php
26.821 POST requests with url.path */wp-login.php
2.795 ...
show more
56.527 requests with url.path */xmlrpc.php
26.821 POST requests with url.path */wp-login.php
2.795 requests with url.path */wp-includes/wlwmanifest.xml
show less
Brute-Force
Bad Web Bot
๐ซ๐ท
dynamix
2026-04-14 09:16:30
(2 months ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ซ๐ฎ
as211431.net
2026-04-14 08:40:26
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /site/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-04-14 08:32:15
(2 months ago)
10 attempts against mh-misc-ban on frost
Web App Attack
๐บ๐ธ
myagent.site
2026-04-14 08:21:11
(2 months ago)
Blocking for trying to access an exploit file: //xmlrpc.php?rsd
Hacking