π³π±
Site.eu
2026-09-27 14:24:18
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-09-27 13:36:12
(1 day ago)
[redacted] 136.90.38.89 - - [27/Sep/2026:15:36:07 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 136.90.38.89 - - [27/Sep/2026:15:36:07 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.90.38.89 - - [27/Sep/2026:15:36:07 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.90.38.89 - - [27/Sep/2026:15:36:08 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.90.38.89 - - [27/Sep/2026:15:36:08 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.90.38.89 - - [27/Sep/2026:15:36:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mo
...
show less
Hacking
Web App Attack
π¨π
backslash
2026-09-27 13:33:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
π§πͺ
cmbplf
2026-09-27 13:30:53
(1 day ago)
10.599 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
π©πͺ
ger-stg-sifi1
2026-09-27 13:24:34
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-09-27 13:14:48
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
π¦πΊ
Klaverstyn
2026-09-27 13:06:04
(1 day ago)
Excessive HTTP request rate
Web App Attack
π¦πΊ
Lazarus
2026-09-27 13:05:43
(1 day ago)
HTTP probe.
Web App Attack
πΊπΈ
mnsf
2026-09-27 13:05:13
(1 day ago)
Too many Status 40X (14)
Brute-Force
Web App Attack
π©πͺ
yitzhaq
2026-09-27 13:04:49
(1 day ago)
136.90.38.89 - - [27/Sep/2026:15:04:46 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4 ...
show more
136.90.38.89 - - [27/Sep/2026:15:04:46 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.90.38.89 - - [27/Sep/2026:15:04:46 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.90.38.89 - - [27/Sep/2026:15:04:46 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.90.38.89 - - [27/Sep/2026:15:04:46 +0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.90.38.89 - - [27/Sep/2026:15:04:46 +0200] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 496
show less
Web App Attack
Hacking
πΊπΈ
kosada.com
2026-09-27 13:04:21
(1 day ago)
Repeated requests for suspicious nonexistent URLs, for example: /wp/wp-includes/wlwmanifest.xml (HTT ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /wp/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
Web App Attack
π©πͺ
KiekerJan
2026-09-27 13:04:16
(1 day ago)
136.90.38.89 - - [27/Sep/2026:15:04:15 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
136.90.38.89 - - [27/Sep/2026:15:04:15 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.90.38.89 - - [27/Sep/2026:15:04:15 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
π©πͺ
Blexyel
2026-09-27 13:04:11
(1 day ago)
136.90.38.89 - - [27/Sep/2026:15:04:10 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5 ...
show more
136.90.38.89 - - [27/Sep/2026:15:04:10 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Brute-Force
Web App Attack
π©πͺ
seal
2026-09-27 13:03:50
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
SSH
Brute-Force
Anonymous
2026-09-27 13:01:35
(1 day ago)
136.90.38.89 - - [27/Sep/2026:15:01:34 +0200] "GET /product-category/marke/mst//?rsd HTTP/1.1" 404 3 ...
show more
136.90.38.89 - - [27/Sep/2026:15:01:34 +0200] "GET /product-category/marke/mst//?rsd HTTP/1.1" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Web App Attack