🇬🇧
openstrike.co.uk
2026-09-12 05:14:05
(10 hours ago)
13 attacks on PHP URLs, Wordpress URLs:
GET /xmlrpc.php?rsd HTTP/1.1
GET /cms/wp-includes/wlwmanifes ...
show more
13 attacks on PHP URLs, Wordpress URLs:
GET /xmlrpc.php?rsd HTTP/1.1
GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1
show less
Web App Attack
Anonymous
2026-09-11 12:24:02
(1 day ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇵🇱
strefapi_com
2026-09-11 12:20:37
(1 day ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-09-11 11:50:24
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 11:49:20
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 207.175.1.77 (77.1.175.207.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 207.175.1.77 (77.1.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 07:49:12.585687 2026] [security2:error] [pid 1818790:tid 1819578] [client 207.175.1.77:59894] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||staging.torreydc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staging.torreydc.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "aqPquGgCXBINm1kzV-i8uAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-11 11:48:51
(1 day ago)
10 attempts against mh_ha-misc-ban on ec102943
Brute-Force
Web App Attack
🇨🇭
backslash
2026-09-11 11:48:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇩🇪
FD-IX
2026-09-11 11:35:26
(1 day ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-11 11:35:15
(1 day ago)
excessive HTTP 404 errors
Bad Web Bot
🇧🇪
cmbplf
2026-09-11 11:34:25
(1 day ago)
1.942 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
Anonymous
2026-09-11 11:32:11
(1 day ago)
[redacted] 207.175.1.77 - - [11/Sep/2026:13:32:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 207.175.1.77 - - [11/Sep/2026:13:32:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 207.175.1.77 - - [11/Sep/2026:13:32:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 207.175.1.77 - - [11/Sep/2026:13:32:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 207.175.1.77 - - [11/Sep/2026:13:32:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 207.175.1.77 - - [11/Sep/2026:13:32:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0
...
show less
Hacking
Web App Attack
🇩🇪
ghostwarriors
2026-09-11 11:20:06
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇬🇧
blik2108
2026-09-11 11:18:01
(1 day ago)
207.175.1.77 - - [11/Sep/2026:11:17:58 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 3431 ...
show more
207.175.1.77 - - [11/Sep/2026:11:17:58 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
207.175.1.77 - - [11/Sep/2026:11:17:58 +0000] "GET //feed/ HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
207.175.1.77 - - [11/Sep/2026:11:17:58 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
207.175.1.77 - - [11/Sep/2026:11:17:58 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
207.175.1.77 - - [11/Sep/2026:11:17:59 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows
...
show less
Web App Attack
🇩🇪
LRob
2026-09-11 11:17:24
(1 day ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: / (+1 more) | query: rsd | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | 2026-09-11 11:17 UTC
show less
Hacking
Web App Attack
🇩🇪
yitzhaq
2026-09-11 11:16:31
(1 day ago)
207.175.1.77 - - [11/Sep/2026:13:16:27 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
207.175.1.77 - - [11/Sep/2026:13:16:27 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
207.175.1.77 - - [11/Sep/2026:13:16:27 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
207.175.1.77 - - [11/Sep/2026:13:16:27 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
207.175.1.77 - - [11/Sep/2026:13:16:27 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
207.175.1.77 - - [11/Sep/2026:13:16:27 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 40
show less
Web App Attack
Hacking