๐ฒ๐ฝ
octageeks.com
2026-08-20 04:11:47
(2 months ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐บ๐ธ
mnsf
2026-08-19 15:05:45
(2 months ago)
Abuse Detected (9)
Brute-Force
Web App Attack
Anonymous
2026-08-19 14:41:53
(2 months ago)
34.23.135.96 - - [19/Aug/2026:16:41:50 +0200] "GET / HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (Windows N ...
show more
34.23.135.96 - - [19/Aug/2026:16:41:50 +0200] "GET / HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.135.96 - - [19/Aug/2026:16:41:50 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.135.96 - - [19/Aug/2026:16:41:50 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.135.96 - - [19/Aug/2026:16:41:51 +0200] "GET / HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.23.135.96 - - [19/Aug/2026:16:41:51 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 12583 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTM
...
show less
Bad Web Bot
Web App Attack
๐จ๐ญ
zynex
2026-08-19 14:37:26
(2 months ago)
URL Probing: /wp-includes/wlwmanifest.xml
Web App Attack
๐ฆ๐ฟ
scientra
2026-08-19 14:26:57
(2 months ago)
High-speed endpoint enumeration โ //2018/wp-includes/wlwmanifest.xml | evidence: 9 unrelated unknown ...
show more
High-speed endpoint enumeration โ //2018/wp-includes/wlwmanifest.xml | evidence: 9 unrelated unknown paths in 20s: //2018/wp-includes/wlwmanifest.xml, //blog/wp-includes/wlwmanifest.xml, //news/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //website/wp-includes/w [detected by Bitwall WAF]
show less
Port Scan
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-08-19 14:20:11
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-19 14:18:19
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 34.23.135.96 (96.135.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.23.135.96 (96.135.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 10:18:15.128592 2026] [security2:error] [pid 25567:tid 25567] [client 34.23.135.96:60154] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bigheartskitchen.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bigheartskitchen.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aoW7J8L-7OAAcwsRH9YCyQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
bescared
2026-08-19 14:16:05
(2 months ago)
F2B - Malicious activity detected. URL Probing. -c23856ef-
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
filstal.org
2026-08-19 14:10:28
(2 months ago)
Bad bot activity detected (automated scraping/probing).
Bad Web Bot
Web App Attack
๐ท๐ด
iulianh
2026-08-19 14:06:31
(2 months ago)
80,443
Brute-Force
SSH
๐จ๐ญ
Origon
2026-08-19 13:50:29
(2 months ago)
http-probing - IP: 34.23.135.96 - time="2026-08-19T15:50:29+02:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 34.23.135.96 - time="2026-08-19T15:50:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.23.135.96 (US/396982) : 4h ban on Ip 34.23.135.96" module=db
show less
Web App Attack
๐ธ๐ช
konseptit
2026-08-19 13:43:41
(2 months ago)
(wordpress) Failed wordpress login from 34.23.135.96 (US/United States/96.135.23.34.bc.googleusercon ...
show more
(wordpress) Failed wordpress login from 34.23.135.96 (US/United States/96.135.23.34.bc.googleusercontent.com)
show less
Brute-Force
๐จ๐ญ
backslash
2026-08-19 13:42:00
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐บ๐ธ
Lee Daniel
2026-08-19 13:39:06
(2 months ago)
[19/Aug/2026:09:39:06.463156 --0400] aoWx@st@RUTt-4PnlTAOEQAAAog 34.23.135.96 54284 127.0.0.1 7081
[ ...
show more
[19/Aug/2026:09:39:06.463156 --0400] aoWx@st@RUTt-4PnlTAOEQAAAog 34.23.135.96 54284 127.0.0.1 7081
[19/Aug/2026:09:39:06.489536 --0400] aoWx@mrr@TF0FGLWJbDfugAAABc 34.23.135.96 54298 127.0.0.1 7081
[19/Aug/2026:09:39:06.545081 --0400] aoWx@rcVAK2uSv29wsQJeAAAAwc 34.23.135.96 54312 127.0.0.1 7081
...
show less
DDoS Attack
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-19 13:36:46
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 34.23.135.96 (96.135.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.23.135.96 (96.135.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 19 09:36:41.059993 2026] [security2:error] [pid 18041:tid 18041] [client 34.23.135.96:52258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bamedica.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bamedica.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aoWxaRT3WUe3pu63NSuaSQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack