๐ง๐ท
ICS Labs
2026-10-17 04:05:01
(4 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-17 UTC.
Brute-Force
๐ง๐ช
cmbplf
2026-10-16 20:39:29
(4 days ago)
2.180 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2026-10-16 18:20:08
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-16 17:56:27
(4 days ago)
excessive HTTP 404 errors
Bad Web Bot
๐ฉ๐ช
yitzhaq
2026-10-16 17:56:18
(4 days ago)
34.23.133.96 - - [16/Oct/2026:19:56:13 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 521 " ...
show more
34.23.133.96 - - [16/Oct/2026:19:56:13 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:19:56:13 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:19:56:14 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:19:56:14 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:19:56:14 +0200] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1
show less
Web App Attack
Hacking
๐ฎ๐ฑ
Dolphi
2026-10-16 17:52:17
(4 days ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-10-16 17:51:32
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.goblinpot.online | URI: //xmlrpc.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 | BODY: <?xml version="1.0"?><methodCall><methodName>system.multicall</methodName><params><param><value><array><data> <value><struct><member><name>methodName</name><value><string>wp.getUsersBlogs</string></value></member><member><name>params</name><value><array><data><value><array><data><value><string>admin</string></value><valu
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
thedreamer.nl
2026-10-16 17:48:13
(4 days ago)
34.23.133.96 - - [16/Oct/2026:19:45:35 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 302 5 "-" ...
show more
34.23.133.96 - - [16/Oct/2026:19:45:35 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "North Charleston" "32.86080" "-79.97460"
34.23.133.96 - - [16/Oct/2026:19:45:37 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "North Charleston" "32.86080" "-79.97460"
34.23.133.96 - - [16/Oct/2026:19:45:37 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "US" "North Charleston" "32.86080" "-79.97460"
34.23.133.96 - - [16/Oct/2026:19:45:37 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-16 17:47:41
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฎ๐น
VHosting
2026-10-16 17:40:03
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-16 17:37:10
(4 days ago)
34.23.133.96 - - [16/Oct/2026:13:36:56 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 162 " ...
show more
34.23.133.96 - - [16/Oct/2026:13:36:56 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:13:36:56 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:13:37:07 -0400] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 5040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:13:37:09 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.133.96 - - [16/Oct/2026:13:37:09 -0400] "GET //?author=1 HTTP/1.1" 301 4930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit
...
show less
Web App Attack
๐บ๐ฆ
Olexiy Backend
2026-10-16 17:08:58
(4 days ago)
34.23.133.96
...
Bad Web Bot
Web App Attack