๐ง๐ช
cmbplf
2026-10-28 09:33:14
(4 hours ago)
3.692 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐ฉ๐ช
big-cloud.nl
2026-10-28 09:07:29
(4 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐บ๐ธ
mnsf
2026-10-28 09:05:13
(4 hours ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
๐ฉ๐ช
maxpower
2026-10-28 09:00:56
(4 hours ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.114.69.208 (US/United States/208.69.114.13 ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.114.69.208 (US/United States/208.69.114.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.114.69.208 - - [28/Oct/2026:10:00:55 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" host=circuitografico.it.etag.it
136.114.69.208 - - [28/Oct/2026:10:00:55 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" host=circuitografico.it
2026/10/28 10:00:55 [error] 1286619#1286619: *1167794 access forbidden by rule, client: 136.114.69.208, server: circuitografico.it.etag.it, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "circuitografico.it.etag.it"
show less
Port Scan
๐จ๐ญ
Origon
2026-10-28 08:51:14
(4 hours ago)
http-probing - IP: 136.114.69.208 - time="2026-10-28T09:51:13+01:00" level=info msg="(555f66b4f6a74 ...
show more
http-probing - IP: 136.114.69.208 - time="2026-10-28T09:51:13+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 136.114.69.208 (US/396982) : 4h ban on Ip 136.114.69.208" module=db
show less
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-28 08:50:27
(4 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2026-10-28 08:48:19
(4 hours ago)
2026/10/28 09:48:18 [error] 2276#100899: *200871 access forbidden by rule, client: 136.114.69.208, s ...
show more
2026/10/28 09:48:18 [error] 2276#100899: *200871 access forbidden by rule, client: 136.114.69.208, server: chat.crxforum.ksol.io, request: "GET //wp-includes/ID3/license.txt HTTP/1.1", host: "chat.crxforum.ksol.io"
...
show less
Web Spam
Anonymous
2026-10-28 08:41:35
(4 hours ago)
[redacted] 136.114.69.208 - - [28/Oct/2026:09:41:21 +0100] "POST //xmlrpc.php HTTP/1.1" 200 462 "-" ...
show more
[redacted] 136.114.69.208 - - [28/Oct/2026:09:41:21 +0100] "POST //xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.114.69.208 - - [28/Oct/2026:09:41:23 +0100] "POST //xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.114.69.208 - - [28/Oct/2026:09:41:25 +0100] "POST //xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.114.69.208 - - [28/Oct/2026:09:41:26 +0100] "POST //xmlrpc.php HTTP/1.1" 200 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.114.69.208 - - [28/Oct/2026:09:41:27 +0100] "POST //x
...
show less
Hacking
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-28 08:39:04
(5 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
thesimonmanuel
2026-10-28 08:37:59
(5 hours ago)
136.114.69.208 - - [28/Oct/2026:14:07:58 +0530] "GET //wp-includes/ID3/license.txt HTTP/1.1" 403 141 ...
show more
136.114.69.208 - - [28/Oct/2026:14:07:58 +0530] "GET //wp-includes/ID3/license.txt HTTP/1.1" 403 141 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "136.114.69.208"
show less
Web App Attack
๐ฉ๐ช
macrob
2026-10-28 08:36:51
(5 hours ago)
2026/10/28 08:36:50 [error] 3346447#3346447: *4523060 access forbidden by rule, client: 136.114.69.2 ...
show more
2026/10/28 08:36:50 [error] 3346447#3346447: *4523060 access forbidden by rule, client: 136.114.69.208, server: cdn.binixocrm.com, request: "GET //wp-includes/ID3/license.txt HTTP/1.1", host: "cdn.binixocrm.com"
2026/10/28 08:36:50 [error] 3346447#3346447: *4523060 access forbidden by rule, client: 136.114.69.208, server: cdn.binixocrm.com, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "cdn.binixocrm.com"
2026/10/28 08:36:50 [error] 3346447#3346447: *4523060 access forbidden by rule, client: 136.114.69.208, server: cdn.binixocrm.com, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "cdn.binixocrm.com"
...
show less
Web App Attack
๐ต๐ฑ
Budyn
2026-10-28 08:36:46
(5 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.astropot.tech | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"136.114.69.208","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5189d5ed878d8ab-ORD","Connection":"Keep-Alive","Accept-Language":"en-US,en;q=0.5","Accept":"te
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Zundapper
2026-10-28 08:36:36
(5 hours ago)
136.114.69.208 - - [28/Oct/2026:09:36:35 +0100] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 ...
show more
136.114.69.208 - - [28/Oct/2026:09:36:35 +0100] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.114.69.208 - - [28/Oct/2026:09:36:36 +0100] "GET //feed/ HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.114.69.208 - - [28/Oct/2026:09:36:36 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.114.69.208 - - [28/Oct/2026:09:36:36 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.114.69.208 - - [28/Oct/2026:09:36:36 +0100] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5
...
show less
Web App Attack
Port Scan
๐ง๐ช
taivas.nl
2026-10-28 08:36:31
(5 hours ago)
Bad_requests
Bad Web Bot
๐ฎ๐น
VHosting
2026-10-28 08:35:04
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack