๐ญ๐บ
DumaNet
2026-07-19 08:59:00
(1 day ago)
WordPress (CMS) attack attempts.
Date: 2026 Jul 19. 10:44:38
Source IP: 34.21.95.170
Portion of ...
show more
WordPress (CMS) attack attempts.
Date: 2026 Jul 19. 10:44:38
Source IP: 34.21.95.170
Portion of the log(s):
34.21.95.170 - [19/Jul/2026:10:44:38 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.21.95.170 - [19/Jul/2026:10:44:38 +0200] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.21.95.170 - [19/Jul/2026:10:44:38 +0200] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.21.95.170 - [19/Jul/2026:10:44:38 +0200] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" ....
show less
Web App Attack
๐จ๐ญ
Origon
2026-07-19 08:41:21
(1 day ago)
http-probing - IP: 34.21.95.170 - time="2026-07-19T10:41:20+02:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 34.21.95.170 - time="2026-07-19T10:41:20+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.21.95.170 (US/396982) : 4h ban on Ip 34.21.95.170" module=db
show less
Web App Attack
๐ท๐บ
DZBOT
2026-07-19 08:40:10
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐จ๐ญ
backslash
2026-07-19 08:27:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ซ๐ฎ
as211431.net
2026-07-19 08:23:22
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: //test/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-07-19 08:23:04
(1 day ago)
[redacted] 34.21.95.170 - - [19/Jul/2026:10:22:59 +0200] "POST //xmlrpc.php HTTP/1.1" 200 411 "-" "M ...
show more
[redacted] 34.21.95.170 - - [19/Jul/2026:10:22:59 +0200] "POST //xmlrpc.php HTTP/1.1" 200 411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.21.95.170 - - [19/Jul/2026:10:22:59 +0200] "POST //xmlrpc.php HTTP/1.1" 200 411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.21.95.170 - - [19/Jul/2026:10:23:00 +0200] "POST //xmlrpc.php HTTP/1.1" 200 411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.21.95.170 - - [19/Jul/2026:10:23:01 +0200] "POST //xmlrpc.php HTTP/1.1" 200 411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 34.21.95.170 - - [19/Jul/2026:10:23:02 +0200] "POST //xmlrpc.php HTTP/1.1" 200 411 "-" "Mozilla/5.0 (Windows NT 10.0; Win
...
show less
Hacking
Web App Attack
๐ซ๐ท
mail.avx.gr
2026-07-19 08:21:52
(1 day ago)
Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 34.21.95.170 - - [19/Jul/2026:11:21:52 +0300] "GET ...
show more
Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: 34.21.95.170 - - [19/Jul/2026:11:21:52 +0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 5461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
show less
Web App Attack
๐ฎ๐น
VHosting
2026-07-19 08:15:03
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-07-19 08:11:19
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack