๐ซ๐ท
SpaceHost-Server
2026-10-07 22:15:31
(1 day ago)
Brute-Force
Web App Attack
๐ฉ๐ช
macrob
2026-10-07 13:00:38
(2 days ago)
2026/10/07 13:00:36 [error] 533536#533536: *26461494 access forbidden by rule, client: 136.113.219.7 ...
show more
2026/10/07 13:00:36 [error] 533536#533536: *26461494 access forbidden by rule, client: 136.113.219.78, server: antzfund.com, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "antzfund.com"
2026/10/07 13:00:36 [error] 533536#533536: *26461500 access forbidden by rule, client: 136.113.219.78, server: antzfund.com, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "antzfund.com"
2026/10/07 13:00:37 [error] 533533#533533: *26461519 access forbidden by rule, client: 136.113.219.78, server: antzfund.com, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "antzfund.com"
...
show less
Web App Attack
๐บ๐ธ
masterguru
2026-10-07 12:46:00
(2 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-147)
Hacking
๐บ๐ธ
agenciahypelab.com.br
2026-10-07 12:33:10
(2 days ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-10-07 12:18:00
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 136.113.219.78 (78.219.113.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 136.113.219.78 (78.219.113.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 08:17:54.915446 2026] [security2:error] [pid 12282:tid 12282] [client 136.113.219.78:58488] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cmcnow.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cmcnow.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "asY4cibD5ycAD5JLTDNVVAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Major Hostility
2026-10-07 12:07:17
(2 days ago)
"GET /?author=3 HTTP/1.1" 404
"POST /xmlrpc.php HTTP/1.1" 403
Web App Attack
๐ง๐ช
cmbplf
2026-10-07 12:06:12
(2 days ago)
9.166 requests in 1 hour (1w21h59m)
Brute-Force
Bad Web Bot
Anonymous
2026-10-07 11:57:34
(2 days ago)
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.cancelletto.gr; logs=/var/log/httpd/domains/cancelletto. ...
show more
[ssd5.kdns.gr] httpd-xmlrpc-post: sites=www.cancelletto.gr; logs=/var/log/httpd/domains/cancelletto.gr.log; samples=//xmlrpc.php
show less
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-10-07 11:50:03
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-10-07 11:41:07
(2 days ago)
(wordpress) Failed wordpress login from 136.113.219.78 (US/United States/78.219.113.136.bc.googleuse ...
show more
(wordpress) Failed wordpress login from 136.113.219.78 (US/United States/78.219.113.136.bc.googleusercontent.com)
show less
Brute-Force
๐จ๐ฆ
zXero
2026-10-07 11:30:15
(2 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
๐ซ๐ท
francoisunix
2026-10-07 11:27:24
(2 days ago)
136.113.219.78 - - [07/Oct/2026:11:27:21 +0000] "POST /xmlrpc.php HTTP/1.0" 401 413 "-" "Mozilla/5.0 ...
show more
136.113.219.78 - - [07/Oct/2026:11:27:21 +0000] "POST /xmlrpc.php HTTP/1.0" 401 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.113.219.78 - - [07/Oct/2026:11:27:21 +0000] "POST /xmlrpc.php HTTP/1.0" 401 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.113.219.78 - - [07/Oct/2026:11:27:22 +0000] "POST /xmlrpc.php HTTP/1.0" 401 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.113.219.78 - - [07/Oct/2026:11:27:22 +0000] "POST /xmlrpc.php HTTP/1.0" 401 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.113.219.78 - - [07/Oct/2026:11:27:22 +0000] "POST /xmlrpc.php HTTP/1.0" 401 413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
...
show less
Web App Attack
Anonymous
2026-05-09 16:09:02
(5 months ago)
Malicious activity detected
Hacking
Web App Attack