|
๐ณ๐ฑ
Site.eu
|
|
Repeated wp-login/xmlrpc attempts
|
Brute-Force
SSH
|
|
|
๐ซ๐ท
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
|
๐ง๐ช
cmbplf
|
|
27.629 requests in 1 hour (3mos1w5d)
|
Brute-Force
Bad Web Bot
|
|
|
๐บ๐ธ
mnsf
|
|
Too many Status 40X (14)
|
Brute-Force
Web App Attack
|
|
|
๐ณ๐ฑ
Savvii
|
|
10 attempts against mh-misc-ban on virgo
|
Web App Attack
|
|
|
๐จ๐ฆ
TechnoSolutions CL
|
|
34.181.232.23 - - [29/Sep/2026:15:46:39 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 ...
show more
34.181.232.23 - - [29/Sep/2026:15:46:39 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 3992 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.181.232.23 - - [29/Sep/2026:15:46:39 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 200 3989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐ฆ๐บ
Bay13
|
|
CrowdSec:custom/http-sensitive-files
|
Web App Attack
|
|
|
๐ฉ๐ช
macrob
|
|
2026/09/29 15:24:56 [error] 796063#796063: *49506275 access forbidden by rule, client: 34.181.232.23 ...
show more
2026/09/29 15:24:56 [error] 796063#796063: *49506275 access forbidden by rule, client: 34.181.232.23, server: bonocom.org, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "bonocom.org"
2026/09/29 15:24:56 [error] 796063#796063: *49506291 access forbidden by rule, client: 34.181.232.23, server: bonocom.org, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "bonocom.org"
2026/09/29 15:24:56 [error] 796067#796067: *49506298 access forbidden by rule, client: 34.181.232.23, server: bonocom.org, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "bonocom.org"
...
show less
|
Web App Attack
|
|
|
๐ฉ๐ช
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
|
๐ฉ๐ช
big-cloud.nl
|
|
Try to access /xmlrpc.php?rsd
|
Web App Attack
|
|
|
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
|
|
34.181.232.23 - - [29/Sep/2026:09:08:18 -0600] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.181.232.23 - - [29/Sep/2026:09:08:18 -0600] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
|
Web App Attack
|
|
|
Anonymous
|
|
Fail2Ban triggered
|
Web App Attack
|
|
|
๐ช๐ธ
robotstxt
|
|
34.181.232.23 - - [29/Sep/2026:14:55:43 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5. ...
show more
34.181.232.23 - - [29/Sep/2026:14:55:43 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.181.232.23"
34.181.232.23 - - [29/Sep/2026:14:55:43 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.181.232.23"
34.181.232.23 - - [29/Sep/2026:14:55:44 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.181.232.23"
34.181.232.23 - - [29/Sep/2026:14:55:42 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.181.232.23"
34.181.232.23 - - [29/Sep/2026:14:55:44 +0000] "GE
...
show less
|
Web App Attack
|
|
|
๐ช๐ธ
pipeline.es
|
|
Web scanning / probing for vulnerable paths | URL: //2020/wp-includes/wlwmanifest.xml | Evidence: la ...
show more
Web scanning / probing for vulnerable paths | URL: //2020/wp-includes/wlwmanifest.xml | Evidence: landingow.aavv.com 34.181.232.23 - - [29/Sep/2026:16:31:07 +0200] \"GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 230 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
|
Port Scan
Web App Attack
|
|
|
๐ซ๐ท
Catalin Negru
|
|
Recidive ban by fail2ban on server.blackbit.ro
|
Brute-Force
|
|