🇬🇧
thetomtaylor.co.uk
2026-06-30 11:06:02
(1 week ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01]
Bad Web Bot
Web App Attack
🇺🇸
SodaAudit.app
2026-06-30 10:22:42
(1 week ago)
[sodaaudit.app] Web app attack. Timestamp: 2026-06-30T08:26:54.000Z. 1 probe events, 1 distinct path ...
show more
[sodaaudit.app] Web app attack. Timestamp: 2026-06-30T08:26:54.000Z. 1 probe events, 1 distinct path(s). Paths (payload): /xmlrpc.php
show less
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-06-30 10:08:01
(1 week ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02,mx01,mx02,mx03,wa ...
show more
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice02,mx01,mx02,mx03,wa01,wa02]
show less
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-30 09:36:55
(1 week ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇨🇭
zynex
2026-06-30 09:34:31
(1 week ago)
URL Probing: /blog/wp-includes/wlwmanifest.xml
Web App Attack
🇺🇦
URAN Publishing Service
2026-06-30 09:05:56
(1 week ago)
136.107.140.223 - - [30/Jun/2026:12:05:55 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 683 ...
show more
136.107.140.223 - - [30/Jun/2026:12:05:55 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.140.223 - - [30/Jun/2026:12:05:55 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
🇺🇸
mnsf
2026-06-30 09:05:39
(1 week ago)
Abuse Detected (10)
Brute-Force
Web App Attack
🇧🇾
lns.bz
2026-06-30 09:01:10
(1 week ago)
Too many 404 requests [BY]
Web App Attack
🇺🇦
Olexiy Backend
2026-06-30 08:58:48
(1 week ago)
136.107.140.223
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-30 08:58:38
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 136.107.140.223 (223.140.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:225170) triggered by 136.107.140.223 (223.140.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 04:58:35.064063 2026] [security2:error] [pid 2364:tid 2364] [client 136.107.140.223:60381] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.speedysremodeling.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.speedysremodeling.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akOFO0U9QBzaM9ctw_nQsAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SoteriaCovenant
2026-06-30 08:45:02
(1 week ago)
Automated probe: /wp-includes/ID3/license.txt on Soteria Global infrastructure. No vulnerable softwa ...
show more
Automated probe: /wp-includes/ID3/license.txt on Soteria Global infrastructure. No vulnerable software present.
show less
Hacking
🇮🇹
VHosting
2026-06-30 08:35:06
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
2026-06-30 08:30:41
(1 week ago)
Attac
Brute-Force
🇪🇸
matatunos
2026-06-30 08:30:17
(1 week ago)
Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte auto ...
show more
Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte automático.
show less
Web App Attack
Bad Web Bot
🇺🇸
TheJimmo
2026-06-30 08:28:35
(1 week ago)
136.107.140.223 136.107.140.223 - - [30/Jun/2026:08:28:32 +0000] "GET //wp-includes/ID3/license.txt ...
show more
136.107.140.223 136.107.140.223 - - [30/Jun/2026:08:28:32 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 11046 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.140.223 136.107.140.223 - - [30/Jun/2026:08:28:33 +0000] "GET //feed/ HTTP/1.1" 404 11004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.140.223 136.107.140.223 - - [30/Jun/2026:08:28:33 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 11017 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.140.223 136.107.140.223 - - [30/Jun/2026:08:28:33 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 11054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.140.223 136.107.140.223 - - [30/Jun/2026:08:28:34 +0000] "
...
show less
Bad Web Bot
Web App Attack