๐จ๐ญ
zynex
2026-06-17 12:56:23
(2 hours ago)
URL Probing: /blog/wp-includes/wlwmanifest.xml
Web App Attack
Anonymous
2026-06-17 12:53:07
(2 hours ago)
Failed Wordpress Logins
Web App Attack
Anonymous
2026-06-17 12:51:14
(2 hours ago)
[redacted]re 34.22.142.218 - - [17/Jun/2026:14:51:00 +0200] "POST //xmlrpc.php HTTP/1.1" 200 436 "-" ...
show more
[redacted]re 34.22.142.218 - - [17/Jun/2026:14:51:00 +0200] "POST //xmlrpc.php HTTP/1.1" 200 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted]re 34.22.142.218 - - [17/Jun/2026:14:51:02 +0200] "POST //xmlrpc.php HTTP/1.1" 200 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted]re 34.22.142.218 - - [17/Jun/2026:14:51:03 +0200] "POST //xmlrpc.php HTTP/1.1" 200 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted]re 34.22.142.218 - - [17/Jun/2026:14:51:05 +0200] "POST //xmlrpc.php HTTP/1.1" 200 436 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted]re 34.22.142.218 - - [17/Jun/2026:14:51:06 +0200] "POST //xmlrpc
...
show less
Hacking
Web App Attack
๐จ๐ญ
backslash
2026-06-17 12:51:00
(2 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ณ๐ฑ
Roderic
2026-06-17 12:33:43
(3 hours ago)
(wordpress-404) Searching for non-existent wordpress installs from 34.22.142.218 (BE/Belgium/Brussel ...
show more
(wordpress-404) Searching for non-existent wordpress installs from 34.22.142.218 (BE/Belgium/Brussels Capital/Brussels/218.142.22.34.bc.googleusercontent.com/[redacted])
show less
Brute-Force
๐ฌ๐ท
ggb_st
2026-06-17 12:10:31
(3 hours ago)
[2026-06-17 12:10:30] 34.22.142.218 triggered a honeypot. Requested on port 80. URI: /blog/wp-includ ...
show more
[2026-06-17 12:10:30] 34.22.142.218 triggered a honeypot. Requested on port 80. URI: /blog/wp-includes/wlwmanifest.xml, UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
...
show less
Bad Web Bot
Brute-Force
Web App Attack
Hacking
SQL Injection
๐ณ๐ฑ
Savvii
2026-06-17 12:06:32
(3 hours ago)
10 attempts against mh_ha-misc-ban on ec102967
Brute-Force
Web App Attack
Anonymous
2026-06-17 12:06:11
(3 hours ago)
[redacted] 34.22.142.218 - - [17/Jun/2026:14:06:08 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 34.22.142.218 - - [17/Jun/2026:14:06:08 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.22.142.218 - - [17/Jun/2026:14:06:08 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.22.142.218 - - [17/Jun/2026:14:06:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.22.142.218 - - [17/Jun/2026:14:06:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.22.142.218 - - [17/Jun/2026:14:06:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
Hacking
Web App Attack
๐บ๐ธ
daveoctober
2026-06-17 12:03:56
(3 hours ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
๐ซ๐ฎ
YF
2026-06-17 12:01:04
(3 hours ago)
WordPress author enumeration
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-17 11:59:40
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.22.142.218 (218.142.22.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.22.142.218 (218.142.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:59:34.308470 2026] [security2:error] [pid 8022:tid 8022] [client 34.22.142.218:57531] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.desarrollosdecolima.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.desarrollosdecolima.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajKMJpOK2fyZmEfyHrtaDAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-17 11:58:35
(3 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐ฉ๐ช
HandyTreff.de
2026-06-17 11:57:54
(3 hours ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -85.344 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -85.344 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
Blexyel
2026-06-17 11:57:23
(3 hours ago)
34.22.142.218 - - [17/Jun/2026:13:57:23 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.22.142.218 - - [17/Jun/2026:13:57:23 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "deranged.blog"
...
show less
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-06-17 11:50:03
(3 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack