🇧🇷
somosbr
2026-01-01 18:18:28
UTC ·
(10 months ago)
[2026-01-01T18:18:28Z] Unsolicited scan from 165.22.37.27 to port 8883/tcp
Port Scan
🇺🇸
MPL
2025-12-20 04:40:19
UTC ·
(10 months ago)
tcp/8080 (2 or more attempts)
Port Scan
🇫🇷
SpaceHost-Server
2025-11-26 23:33:03
UTC ·
(11 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2025-11-26 20:10:07
UTC ·
(11 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇷
SpaceHost-Server
2025-11-25 23:31:31
UTC ·
(11 months ago)
Brute-Force
Web App Attack
🇩🇪
Vegascosmetics
2025-11-24 22:50:35
UTC ·
(11 months ago)
Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned
Hacking
Bad Web Bot
Web App Attack
🇹🇷
rtbh.com.tr
2025-11-24 20:10:06
UTC ·
(11 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇩🇪
macrob
2025-11-24 13:13:39
UTC ·
(11 months ago)
2025/11/24 13:13:38 [error] 1141443#1141443: *121094110 access forbidden by rule, client: 165.22.37.27, server: 100fs.org, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org"
2025/11/24 13:13:38 [error] 1141441#1141441: *121094116 ...
show more
2025/11/24 13:13:38 [error] 1141443#1141443: *121094110 access forbidden by rule, client: 165.22.37.27, server: 100fs.org, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org"
2025/11/24 13:13:38 [error] 1141441#1141441: *121094116 access forbidden by rule, client: 165.22.37.27, server: 100fs.org, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "100fs.org"
2025/11/24 13:13:38 [error] 1141441#1141441: *121094122 access forbidden by rule, client: 165.22.37.27, server: 100fs.org, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "100fs.org"
...
show less
Web App Attack
🇺🇸
WizardsToolkit
2025-11-24 11:57:47
UTC ·
(11 months ago)
attempted to access /wp-includes/wlwmanifest.xml
Web App Attack
🇺🇸
WeekendWeb
2025-11-24 09:27:26
UTC ·
(11 months ago)
Wordpress Vunerability attack
Web App Attack
🇺🇸
S.O.B.A. Dev.
2025-11-24 08:51:32
UTC ·
(11 months ago)
Threat Blocked by BeeHive from (ASN:14061) (Network:DIGITALOCEAN-ASN) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2025-11-24T08:51:32Z)
Web Spam
Brute-Force
Web App Attack
🇺🇸
myagent.site
2025-11-24 07:52:27
UTC ·
(11 months ago)
Blocking for trying to access an exploit file: //xmlrpc.php
Hacking
🇩🇪
macrob
2025-11-24 07:39:47
UTC ·
(11 months ago)
2025/11/24 07:39:45 [error] 1096587#1096587: *120492176 access forbidden by rule, client: 165.22.37.27, server: bonocom.org, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "bonocom.org"
2025/11/24 07:39:45 [error] 1096587#1096587: *12049 ...
show more
2025/11/24 07:39:45 [error] 1096587#1096587: *120492176 access forbidden by rule, client: 165.22.37.27, server: bonocom.org, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "bonocom.org"
2025/11/24 07:39:45 [error] 1096587#1096587: *120490029 access forbidden by rule, client: 165.22.37.27, server: bonocom.org, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "bonocom.org"
2025/11/24 07:39:45 [error] 1096587#1096587: *120492229 access forbidden by rule, client: 165.22.37.27, server: bonocom.org, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "bonocom.org"
...
show less
Web App Attack
🇳🇱
CryptoYakari
2025-11-24 07:25:13
UTC ·
(11 months ago)
165.22.37.27 - - [24/Nov/2025:10:25:07 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
165.22.37.27 - - [24/Nov/202 ...
show more
165.22.37.27 - - [24/Nov/2025:10:25:07 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
165.22.37.27 - - [24/Nov/2025:10:25:07 +0300] "GET //xmlrpc.php?rsd HTTP/1.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
165.22.37.27 - - [24/Nov/2025:10:25:08 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
165.22.37.27 - - [24/Nov/2025:10:25:08 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
165.22.37.27 - - [24/Nov/2025:10:25:08 +0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3185 "-" "Mo
...
show less
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-24 04:22:13
UTC ·
(11 months ago)
(mod_security) mod_security (id:225170) triggered by 165.22.37.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:22:07.248361 2025] [security2:error] [pid 29412:tid 29412] [client 165.22.37.27:0] ModSecu ...
show more
(mod_security) mod_security (id:225170) triggered by 165.22.37.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:22:07.248361 2025] [security2:error] [pid 29412:tid 29412] [client 165.22.37.27:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.virtualizecr.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.virtualizecr.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aSPdbyhO37CimO-g3aK-1gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack