๐ฆ๐ท
RocketEmi
2025-08-28 19:04:32
(11 months ago)
Intento de hackeo
Brute-Force
๐ซ๐ฎ
cycastic
2025-08-27 19:24:01
(11 months ago)
Probed /cms/wp-includes/wlwmanifest.xml on 08/27/2025 19:21:58 +00:00 (UA: Mozilla/5.0 (Windows NT 1 ...
show more
Probed /cms/wp-includes/wlwmanifest.xml on 08/27/2025 19:21:58 +00:00 (UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36, Query: )
Probed /wordpress/wp-includes/wlwmanifest.xml on 08/27/2025 19:21:58 +00:00 (UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36, Query: )
Probed /xmlrpc.php on 08/27/2025 19:21:58 +00:00 (UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36, Query: ?rsd)
Probed /web/wp-includes/wlwmanifest.xml on 08/27/2025 19:21:58 +00:00 (UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36, Query: )
Probed /wp1/wp-includes/wlwmanifest.xml on 08/27/2025 19:21:58 +00:00 (UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36, Query: )
show less
Web App Attack
๐ซ๐ท
tecnoacquisti.com
2025-08-27 18:35:21
(1 year ago)
PrestaShop Security Module: Calls wp-admin and wp-login and xmlrpc.php calling known vulnerabilities
Web App Attack
๐บ๐ธ
myagent.site
2025-08-27 17:58:59
(1 year ago)
Blocking for trying to access an exploit file: //xmlrpc.php?rsd
Hacking
๐ณ๐ฑ
CryptoYakari
2025-08-27 17:33:19
(1 year ago)
174.138.27.235 - - [27/Aug/2025:20:33:16 +0300] "GET //wp-includes/ID3/license.txt HTTP/1.0" 404 351 ...
show more
174.138.27.235 - - [27/Aug/2025:20:33:16 +0300] "GET //wp-includes/ID3/license.txt HTTP/1.0" 404 3514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
174.138.27.235 - - [27/Aug/2025:20:33:16 +0300] "GET //feed/ HTTP/1.0" 404 3514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
174.138.27.235 - - [27/Aug/2025:20:33:16 +0300] "GET //xmlrpc.php?rsd HTTP/1.0" 404 530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
174.138.27.235 - - [27/Aug/2025:20:33:17 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
174.138.27.235 - - [27/Aug/2025:20:33:17 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 3514 "-" "Mozilla/5.0 (Windows NT 10.0
...
show less
Web Spam
Blog Spam
Bad Web Bot
Web App Attack
๐ฉ๐ช
rh24
2025-08-27 17:28:53
(1 year ago)
(wordpress) Failed wordpress login from 174.138.27.235 (SG/Singapore/-): (CF_ENABLE)
Brute-Force
๐ฆ๐บ
nzhost.co.nz
2025-08-27 15:15:38
(1 year ago)
$f2bV_matches
Hacking
Brute-Force
๐ฉ๐ช
Interceptor_HQ
2025-08-27 14:27:46
(1 year ago)
request_uri: / -- automatic report --
Hacking
Brute-Force
๐ฉ๐ช
Ba-Yu
2025-08-27 13:11:47
(1 year ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
๐ฉ๐ช
mondor.ro
2025-08-27 13:09:31
(1 year ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 174.138.27.235, Reason ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 174.138.27.235, Reason:[(manifest) WordPress wlwmanifest.xml Attack 174.138.27.235 (SG/Singapore/-): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
๐บ๐ธ
COMPLEX
2025-08-27 11:45:23
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN) ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 14061 (DIGITALOCEAN-ASN)
Protocol: HTTP/1.1 (GET method)
Endpoint: /site/wp-includes/wlwmanifest.xml
show less
Bad Web Bot
Anonymous
2025-08-27 11:03:40
(1 year ago)
wordpress-trap
Web App Attack
๐ต๐ฑ
sefinek.net
2025-08-27 09:25:37
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: //wp-includes/ID3/license.txt
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
Savvii
2025-08-27 09:20:29
(1 year ago)
10 attempts against mh-misc-ban on taro
Web App Attack
๐ซ๐ท
Kenshin869
2025-08-27 08:45:32
(1 year ago)
Wordpress unauthorized access attempt
Brute-Force