๐ฉ๐ช
webanyone
2026-09-14 12:47:11
(1 week ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ง๐ท
vfAcceloReporter
2026-09-14 12:41:04
(1 week ago)
34.139.147.62 - - [14/Sep/2026:09:41:00 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 500 579 "-" "Mozilla/ ...
show more
34.139.147.62 - - [14/Sep/2026:09:41:00 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:09:41:01 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:09:41:02 -0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:09:41:03 -0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:09:41:03 -0300] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 500 579 "-" "Mo
...
show less
Brute-Force
Web App Attack
Exploited Host
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-14 12:40:53
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฎ๐น
VHosting
2026-09-14 12:40:03
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฎ๐ฑ
Dolphi
2026-09-14 12:40:02
(1 week ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
Anonymous
2026-09-14 12:36:09
(1 week ago)
Web scanner: GET //wp-includes/ID3/license.txt
Web App Attack
Hacking
๐ณ๐ด
jad-abuse
2026-09-14 12:35:12
(1 week ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 17 hits.
show less
Brute-Force
Web App Attack
๐ฌ๐ง
abivia
2026-09-14 12:34:24
(1 week ago)
Abivia WAF trigger: Rule not-wp: WP probing on non-WP site uri: //wp-includes/ID3/license.txt
Hacking
Web App Attack
๐บ๐ธ
kosada.com
2026-09-14 12:34:24
(1 week ago)
Repeated requests for suspicious nonexistent URLs, for example: //wordpress/wp-includes/wlwmanifest. ...
show more
Repeated requests for suspicious nonexistent URLs, for example: //wordpress/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
Web App Attack
๐บ๐ธ
abenage
2026-09-14 12:29:03
(1 week ago)
34.139.147.62 - - [14/Sep/2026:06:29:02 -0600] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 564 ...
show more
34.139.147.62 - - [14/Sep/2026:06:29:02 -0600] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-14 12:27:29
(1 week ago)
[redacted] 34.139.147.62 - - [14/Sep/2026:14:27:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 34.139.147.62 - - [14/Sep/2026:14:27:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.139.147.62 - - [14/Sep/2026:14:27:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.139.147.62 - - [14/Sep/2026:14:27:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.139.147.62 - - [14/Sep/2026:14:27:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.139.147.62 - - [14/Sep/2026:14:27:27 +0200] "POST //xmlrpc.php
...
show less
Hacking
Web App Attack
๐บ๐ธ
lavnet.net
2026-09-14 12:18:04
(1 week ago)
34.139.147.62 - - [14/Sep/2026:12:18:04 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 2083 ...
show more
34.139.147.62 - - [14/Sep/2026:12:18:04 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:12:18:04 +0000] "GET /feed/ HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:12:18:04 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 403 2086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:12:18:04 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.139.147.62 - - [14/Sep/2026:12:18:04 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
Brute-Force