๐ง๐ช
cmbplf
2026-10-12 20:49:25
(23 hours ago)
3.213 requests with url.path //xmlrpc.php
852 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐บ๐ธ
lostswordfish.com
2026-10-12 19:08:04
(1 day ago)
Wordfence waf block on secure2024 fairregistry
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-12 18:15:44
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-10-12 18:15:39
(1 day ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐จ๐ญ
4server
2026-10-12 18:05:56
(1 day ago)
[MonOct1220:05:50.8913742026][security2:error][pid2972322:tid2972364][client34.123.144.72:0]ModSecur ...
show more
[MonOct1220:05:50.8913742026][security2:error][pid2972322:tid2972364][client34.123.144.72:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"714\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"cadvending.ch\"][uri\"/xmlrpc.php\"][unique_id\"as0hfuPjkz2m2jUUNqtHsQAAAA8\"]
show less
Hacking
Web App Attack
Anonymous
2026-10-12 18:05:41
(1 day ago)
[redacted] 34.123.144.72 - - [12/Oct/2026:20:05:33 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 34.123.144.72 - - [12/Oct/2026:20:05:33 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.123.144.72 - - [12/Oct/2026:20:05:34 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.123.144.72 - - [12/Oct/2026:20:05:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.123.144.72 - - [12/Oct/2026:20:05:35 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
[redacted] 34.123.144.72 - - [12/Oct/2026:20:05:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Moz
...
show less
Hacking
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-12 18:05:27
(1 day ago)
34.123.144.72 - - [12/Oct/2026:14:05:25 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 5682 ...
show more
34.123.144.72 - - [12/Oct/2026:14:05:25 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 5682 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.123.144.72 - - [12/Oct/2026:14:05:25 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 6341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.123.144.72 - - [12/Oct/2026:14:05:26 -0400] "GET //?author=1 HTTP/1.1" 301 5565 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.123.144.72 - - [12/Oct/2026:14:05:26 -0400] "GET //?author=2 HTTP/1.1" 301 5555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.123.144.72 - - [12/Oct/2026:14:05:26 -0400] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 7469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-10-12 18:05:06
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
webanyone
2026-10-12 17:25:21
(1 day ago)
Self-declared scanner | method: GET | path: / | ua: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https ...
show more
Self-declared scanner | method: GET | path: / | ua: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)
show less
Port Scan
Web App Attack
๐ณ๐ด
jad-abuse
2026-10-12 17:24:46
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: scanner_u ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: scanner_ua. Observed by 1 sensor(s); 1 hits.
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 17:12:28
(1 day ago)
WAF: blocked at the CDN edge: Polygon: challenge risky sources /
Web App Attack
Hacking
๐ซ๐ฎ
as211431.net
2026-10-12 16:58:59
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2026-10-12 16:49:34
(1 day ago)
[12/Oct/2026:19:49:34 +0300] -- 34.123.144.72 Ban reason: User-Agent CMS-Checker
Bad Web Bot
Web App Attack