2026-11-15 11:38:25
UTC ·
(5 minutes ago)
34.38.26.98 - - [15/Nov/2026:12:38:25 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:1 ...
show more
34.38.26.98 - - [15/Nov/2026:12:38:25 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:12:38:25 +0100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 303 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:12:38:25 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:12:38:25 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 510 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:12:38:25 +0100] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 510 "-" "Mozilla/5.0
...
show less
Brute-Force
SSH
🇩🇪
throny
2026-11-15 11:36:10
UTC ·
(8 minutes ago)
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 3 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0. ...
show more
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 3 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.11
Requested, e.g.:
- portainer.[REDACTED]/wp-includes/wlwmanifest.xml
show less
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-15 11:33:27
UTC ·
(10 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇫🇷
masterguru
2026-11-15 11:33:19
UTC ·
(10 minutes ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)
Hacking
🇳🇱
Alt255
2026-11-15 11:31:58
UTC ·
(12 minutes ago)
[ti-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.38.26.98 - - [15/Nov/2026:12:31:50 +0100] "GET /login/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6883 "-" "Mozilla/5.0 (Windows NT ...
show more
[ti-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.38.26.98 - - [15/Nov/2026:12:31:50 +0100] "GET /login/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:12:31:50 +0100] "GET /login/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:12:31:50 +0100] "GET /login/xmlrpc.php?rsd HTTP/1.1" 404 6883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.38.26.98 - - [15/Nov/2026:12:31:50 +0100] "GET /login/xmlrpc.php?rsd HTTP/1.
...
show less
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-15 11:31:49
UTC ·
(12 minutes ago)
Try to access /xmlrpc.php?rsd
Web App Attack
🇺🇸
lcpacs
2026-11-15 11:30:25
UTC ·
(13 minutes ago)
Honeypot: blocked after 25 hits against decoy endpoints
Bad Web Bot
Web App Attack
🇵🇱
strefapi_com
2026-11-15 11:28:53
UTC ·
(15 minutes ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-11-15 11:25:05
UTC ·
(19 minutes ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
dbmwebdesign
2026-11-15 11:20:13
UTC ·
(24 minutes ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
2026-11-15 11:19:09
UTC ·
(25 minutes ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇦
URAN Publishing Service
2026-11-15 11:17:54
UTC ·
(26 minutes ago)
[15/Nov/2026:13:17:54 +0200] -- 34.38.26.98 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/wlwmanifest.xml HTTP/1.1
Bad Web Bot
Web App Attack
🇪🇸
Francisco Vallejo
2026-11-15 11:17:17
UTC ·
(27 minutes ago)
[Sun Nov 15 12:17:16.354259 2026] [authz_core:error] [pid 838897:tid 838958] [client 34.38.26.98:51572] AH01630: client denied by server configuration: proxy:http://localhost:8080/admin/login/wp-includes/wlwmanifest.xml
[Sun Nov 15 12:17:16.383795 20 ...
show more
[Sun Nov 15 12:17:16.354259 2026] [authz_core:error] [pid 838897:tid 838958] [client 34.38.26.98:51572] AH01630: client denied by server configuration: proxy:http://localhost:8080/admin/login/wp-includes/wlwmanifest.xml
[Sun Nov 15 12:17:16.383795 2026] [authz_core:error] [pid 838897:tid 838966] [client 34.38.26.98:51572] AH01630: client denied by server configuration: proxy:http://localhost:8080/admin/login/xmlrpc.php
[Sun Nov 15 12:17:16.416831 2026] [authz_core:error] [pid 838897:tid 838965] [client 34.38.26.98:51572] AH01630: client denied by server configuration: proxy:http://localhost:8080/admin/login
[Sun Nov 15 12:17:16.447117 2026] [authz_core:error] [pid 838897:tid 838953] [client 34.38.26.98:51572] AH01630: client denied by server configuration: proxy:http://localhost:8080/admin/login/blog/wp-includes/wlwmanifest.xml
[Sun Nov 15 12:17:16.477427 2026] [authz_core:error] [pid 838897:tid 838959] [client 34.38.26.98:51572] AH01630: client denied by server configuration: proxy:ht
...
show less
Brute-Force
SSH
