๐ซ๐ท
ELYAZ
2026-06-09 17:55:42
(2 weeks ago)
(wordpress) Failed wordpress login from 157.245.202.123 (SG/Singapore/-): (CF_ENABLE)
Brute-Force
Anonymous
2026-06-09 04:57:18
(2 weeks ago)
157.245.202.123 - - [09/Jun/2026:06:57:12 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 ...
show more
157.245.202.123 - - [09/Jun/2026:06:57:12 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
157.245.202.123 - - [09/Jun/2026:06:57:15 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
157.245.202.123 - - [09/Jun/2026:06:57:16 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
157.245.202.123 - - [09/Jun/2026:06:57:16 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
157.245.202.123 - - [09/Jun/2026:06:57:17 +0200] "GET /website/wp-includes/wlwmanifest.xm
...
show less
Brute-Force
Web App Attack
๐ช๐ธ
pipeline.es
2026-06-09 02:38:01
(2 weeks ago)
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: mi ...
show more
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: microsites.grupoeuropa.com 157.245.202.123 - - [09/Jun/2026:04:37:28 +0200] \"GET //site/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 12541 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36\" GEOIP_COUNTRY_CODE=SG | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Port Scan
Web App Attack
๐ซ๐ท
ELYAZ
2026-06-08 15:24:56
(2 weeks ago)
(y3) Failed access -byebye- from 157.245.202.123 (SG/Singapore/-): (CF_ENABLE)
Hacking
๐ซ๐ท
ELYAZ
2026-06-07 14:52:39
(2 weeks ago)
(wordpress) Failed wordpress login from 157.245.202.123 (SG/Singapore/-): (CF_ENABLE)
Brute-Force
Anonymous
2026-06-06 15:52:50
(2 weeks ago)
[osotir.org] httpd-xmlrpc-post: sites=e-filokalia.com; logs=/var/log/httpd/domains/e-filokalia.com.l ...
show more
[osotir.org] httpd-xmlrpc-post: sites=e-filokalia.com; logs=/var/log/httpd/domains/e-filokalia.com.log; samples=//xmlrpc.php
show less
Brute-Force
Web App Attack
๐ซ๐ท
ELYAZ
2026-06-06 13:06:53
(2 weeks ago)
(y3) Failed access -byebye- from 157.245.202.123 (SG/Singapore/-): (CF_ENABLE)
Hacking
๐ช๐ธ
pipeline.es
2026-06-06 07:44:37
(2 weeks ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
๐ช๐ธ
pipeline.es
2026-06-06 00:33:24
(2 weeks ago)
Web scanning / probing for vulnerable paths | URL: //wp2/wp-includes/wlwmanifest.xml | Evidence: mic ...
show more
Web scanning / probing for vulnerable paths | URL: //wp2/wp-includes/wlwmanifest.xml | Evidence: microsites.grupoeuropa.com 157.245.202.123 - - [06/Jun/2026:02:32:38 +0200] \"GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 12540 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36\" GEOIP_COUNTRY_CODE=SG | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Port Scan
Web App Attack
๐ซ๐ท
ELYAZ
2026-06-05 13:05:39
(3 weeks ago)
(wordpress) Failed wordpress login from 157.245.202.123 (SG/Singapore/-): (CF_ENABLE)
Brute-Force
๐ช๐ธ
pipeline.es
2026-06-05 07:33:44
(3 weeks ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
๐ช๐ธ
pipeline.es
2026-06-04 14:22:31
(3 weeks ago)
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: mi ...
show more
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: microsites.grupoeuropa.com 157.245.202.123 - - [04/Jun/2026:16:21:51 +0200] \"GET //site/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 12541 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36\" GEOIP_COUNTRY_CODE=ET | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Port Scan
Web App Attack
๐ซ๐ท
ELYAZ
2026-06-04 12:10:44
(3 weeks ago)
(y3) Failed access -byebye- from 157.245.202.123 (SG/Singapore/-): (CF_ENABLE)
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-04 09:16:53
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 157.245.202.123 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 157.245.202.123 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 05:16:49.005597 2026] [security2:error] [pid 4525:tid 4525] [client 157.245.202.123:54302] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||galvanizetm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "galvanizetm.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiFCgYbnT3OfnlIug6NBVwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
ELYAZ
2026-06-03 11:31:18
(3 weeks ago)
(wordpress) Failed wordpress login from 157.245.202.123 (SG/Singapore/-): (CF_ENABLE)
Brute-Force