🇺🇸
solantex
2026-11-11 09:24:20
UTC ·
(1 day ago)
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
Web App Attack
🇬🇧
Smish
2026-11-10 09:36:32
UTC ·
(2 days ago)
HONEYPOT HIT --> Fail2ban time=1794303391 log=2026-11-10T09:36:31+00:00 ip=139.59.92.232 host=44net.uk method=GET uri="//xmlrpc.php?rsd" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904. ...
show more
HONEYPOT HIT --> Fail2ban time=1794303391 log=2026-11-10T09:36:31+00:00 ip=139.59.92.232 host=44net.uk method=GET uri="//xmlrpc.php?rsd" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ref="-" rid=413baf68c28e258ed0f4ed9d544ff50a
show less
Web App Attack
🇫🇷
masterguru
2026-11-10 08:28:42
UTC ·
(2 days ago)
(wordpress) Apache: Failed WordPress login from 139.59.92.232 (IN/India/-): 10 in the last 3600 secs (0-201)
Hacking
🇦🇺
Martlark
2026-11-10 08:06:59
UTC ·
(2 days ago)
Flask-IPban - exploit URL requested:/wp-includes/wlwmanifest.xml
Web App Attack
🇫🇷
dynamix
2026-11-10 07:48:51
UTC ·
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-11-10 07:48:29
UTC ·
(2 days ago)
(wordpress) Apache: Failed WordPress login from 139.59.92.232 (IN/India/-): 10 in the last 3600 secs (0-197)
Hacking
🇺🇸
TPI-Abuse
2026-11-10 07:08:54
UTC ·
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 139.59.92.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:08:50.655211 2026] [security2:error] [pid 1933:tid 1933] [client 139.59.92.232:52726] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 139.59.92.232 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:08:50.655211 2026] [security2:error] [pid 1933:tid 1933] [client 139.59.92.232:52726] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.innolympics.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.innolympics.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "avLDAqkL56KhVIS34OEWvAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-09 22:04:41
UTC ·
(2 days ago)
(wordpress) Apache: Failed WordPress login from 139.59.92.232 (IN/India/-): 10 in the last 3600 secs (0-195)
Hacking
🇩🇪
on-com
2026-11-09 22:01:28
UTC ·
(2 days ago)
URL scan
Brute-Force
Web App Attack
🇩🇪
SCHAPPY
2026-11-09 21:59:38
UTC ·
(2 days ago)
Mutliple attempts to access forbidden web resources, HTTP code 403.
Web App Attack
🇨🇭
zynex
2026-11-09 21:39:55
UTC ·
(2 days ago)
URL Probing: /fr/wp-includes/wlwmanifest.xml
Web App Attack
🇺🇸
mnsf
2026-11-09 20:05:08
UTC ·
(2 days ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇺🇸
not_hanjo_mei
2026-11-09 19:45:05
UTC ·
(2 days ago)
Scanning for exposed credential files (.env, .git, cloud keys): 35 requests in 24h.
Hacking
Web App Attack
2026-11-09 18:18:40
UTC ·
(2 days ago)
[redacted] 139.59.92.232 - - [09/Nov/2026:19:18:24 +0100] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 139.59.92.232 - - [09/ ...
show more
[redacted] 139.59.92.232 - - [09/Nov/2026:19:18:24 +0100] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 139.59.92.232 - - [09/Nov/2026:19:18:26 +0100] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 139.59.92.232 - - [09/Nov/2026:19:18:27 +0100] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 139.59.92.232 - - [09/Nov/2026:19:18:29 +0100] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 139.59.92.232 - - [09/Nov/2026:19:18:30 +0100] "POST /xmlrpc.php HTTP/1.1" 2
...
show less
Hacking
Web App Attack
🇺🇸
ruusvuu
2026-11-09 15:30:53
UTC ·
(3 days ago)
Automated abuse report: 15 attack/probe requests from DigitalOcean, LLC / IN.
Targeted paths: /wlwmanifest.xml, /wp-includes/wlwmanifest.xml.
Sample log lines:
[istood] 139.59.92.232 - - [09/Nov/2026:15:30:51 +0000] "GET /wp-includes/wlwmanifest.xml ...
show more
Automated abuse report: 15 attack/probe requests from DigitalOcean, LLC / IN.
Targeted paths: /wlwmanifest.xml, /wp-includes/wlwmanifest.xml.
Sample log lines:
[istood] 139.59.92.232 - - [09/Nov/2026:15:30:51 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 7862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro…
[istood] 139.59.92.232 - - [09/Nov/2026:15:30:51 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 7862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro…
[istood] 139.59.92.232 - - [09/Nov/2026:15:30:51 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 7862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro…
Detected by an automated web-server log monitor.
show less
Web App Attack
