๐ณ๐ฑ
oisecnet
2026-10-16 21:01:45
(1 hour ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-10-16. 116 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-10-16. 116 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
๐ง๐ช
cmbplf
2026-10-16 14:34:57
(8 hours ago)
4.779 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐จ๐ญ
Origon
2026-10-16 12:34:10
(10 hours ago)
http-probing - IP: 104.196.23.144 - time="2026-10-16T14:34:10+02:00" level=info msg="(555f66b4f6a74 ...
show more
http-probing - IP: 104.196.23.144 - time="2026-10-16T14:34:10+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.196.23.144 (US/396982) : 4h ban on Ip 104.196.23.144" module=db
show less
Web App Attack
Anonymous
2026-10-16 12:34:09
(10 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐จ๐ญ
zynex
2026-10-16 12:19:02
(10 hours ago)
URL Probing: /wp1/wp-includes/wlwmanifest.xml
Web App Attack
๐ช๐ธ
Francisco Vallejo
2026-10-16 12:17:46
(10 hours ago)
[Fri Oct 16 14:17:45.893701 2026] [authz_core:error] [pid 1947223:tid 1947277] [client 104.196.23.14 ...
show more
[Fri Oct 16 14:17:45.893701 2026] [authz_core:error] [pid 1947223:tid 1947277] [client 104.196.23.144:59148] AH01630: client denied by server configuration: proxy:http://localhost:8096/wp-includes/ID3/license.txt
[Fri Oct 16 14:17:45.998671 2026] [authz_core:error] [pid 1947223:tid 1947279] [client 104.196.23.144:59148] AH01630: client denied by server configuration: proxy:http://localhost:8096/feed/
[Fri Oct 16 14:17:46.096625 2026] [authz_core:error] [pid 1947223:tid 1947230] [client 104.196.23.144:59148] AH01630: client denied by server configuration: proxy:http://localhost:8096/xmlrpc.php
[Fri Oct 16 14:17:46.215252 2026] [authz_core:error] [pid 1947223:tid 1947228] [client 104.196.23.144:59148] AH01630: client denied by server configuration: proxy:http://localhost:8096/blog/wp-includes/wlwmanifest.xml
[Fri Oct 16 14:17:46.309263 2026] [authz_core:error] [pid 1947223:tid 1947285] [client 104.196.23.144:59148] AH01630: client denied by server configuration: proxy:http://localhost:80
...
show less
Brute-Force
SSH
๐ฆ๐ฑ
router.al
2026-10-16 12:17:18
(10 hours ago)
10/16/2026-12:17:18.457338 104.196.23.144 Protocol: 6 GPL WEB_SERVER 403 Forbidden
Port Scan
๐ฎ๐น
VHosting
2026-10-16 12:15:03
(10 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-16 12:14:53
(10 hours ago)
10 attempts against mh_ha-misc-ban on ec102942
Brute-Force
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-10-16 12:14:18
(10 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-includes/ (Match: /wp-includes/)
show less
Hacking
Exploited Host
Web App Attack
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-16 12:14:16
(10 hours ago)
16/Oct/2026:12:14:13 +0000;104.196.23.144;"-"
16/Oct/2026:12:14:14 +0000;104.196.23.144;"-"
16/Oct/2 ...
show more
16/Oct/2026:12:14:13 +0000;104.196.23.144;"-"
16/Oct/2026:12:14:14 +0000;104.196.23.144;"-"
16/Oct/2026:12:14:14 +0000;104.196.23.144;"/create-event/xmlrpc.php?rsd"
16/Oct/2026:12:14:15 +0000;104.196.23.144;"/create-event/blog/wp-includes/wlwmanifest.xml"
16/Oct/2026:12:14:15 +0000;104.196.23.144;"-"
16/Oct/2026:12:14:15 +0000;104.196.23.144;"/create-event/web/wp-includes/wlwmanifest.xml"
16/Oct/2026:12:14:15 +0000;104.196.23.144;"/create-event/wordpress/wp-includes/wlwmanifest.xml"
...
show less
Web Spam
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-10-16 12:12:14
(10 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.teddypot.site | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-10-16 12:11:09
(10 hours ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
๐บ๐ธ
fazar
2026-10-16 12:06:02
(10 hours ago)
crowdsecurity/http-probing on node: us01
Web App Attack
Hacking
๐ฉ๐ช
todix
2026-10-16 12:05:50
(10 hours ago)
"GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
"GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6506 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Web App Attack