🇺🇦
URAN Publishing Service
2026-09-02 10:02:44
UTC ·
(2 months ago)
[02/Sep/2026:13:02:44 +0300] -- 34.48.54.111 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/ID3/license.txt HTTP/1.1
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-02 09:59:13
UTC ·
(2 months ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
🇮🇹
CoreTech srl
2026-09-02 09:58:57
UTC ·
(2 months ago)
cloudlinux2 fail2ban: 2026-09-02 11:54:13,047 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 106.215.142.220 - 2026-09-02 11:54:13cloudlinux2 fail2ban: 2026-09-02 11:54:34,271 fail2ban.filter [1472]: INFO [plesk-wordpres ...
show more
cloudlinux2 fail2ban: 2026-09-02 11:54:13,047 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 106.215.142.220 - 2026-09-02 11:54:13cloudlinux2 fail2ban: 2026-09-02 11:54:34,271 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 185.251.19.177 - 2026-09-02 11:54:34cloudlinux2 fail2ban: 2026-09-02 11:54:46,749 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.101.238.237 - 2026-09-02 11:54:46cloudlinux2 fail2ban: 2026-09-02 11:54:55,116 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 194.99.24.142 - 2026-09-02 11:54:54cloudlinux2 fail2ban: 2026-09-02 11:54:59,240 fail2ban.actions [1472]: NOTICE [plesk-modsecurity] Ban 106.215.142.220cloudlinux2 fail2ban: 2026-09-02 11:54:59,246 fail2ban.filter [1472]: INFO [recidive] Found 106.215.142.220 - 2026-09-02 11:54:59cloudlinux2 fail2ban: 2026-09-02 11:54:59,077 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 106.215.142.220 - 2026-09-02 11:54:58cloudlinux2 fail2ban:
show less
Web App Attack
🇩🇪
Bedios GmbH
2026-09-02 09:57:57
UTC ·
(2 months ago)
Wordpress hacking attempt
Web App Attack
🇧🇬
HighWay
2026-09-02 09:55:14
UTC ·
(2 months ago)
34.48.54.111 - - [02/Sep/2026:09:55:06 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 5815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026 ...
show more
34.48.54.111 - - [02/Sep/2026:09:55:06 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 5815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:09:55:07 +0000] "GET //feed/ HTTP/1.1" 404 5815 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:09:55:07 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:09:55:07 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:09:55:08 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64
...
show less
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-09-02 09:50:13
UTC ·
(2 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-02 09:49:27
UTC ·
(2 months ago)
[redacted] 34.48.54.111 - - [02/Sep/2026:11:49:22 +0200] "POST //xmlrpc.php HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.48.54.111 - - [02/Se ...
show more
[redacted] 34.48.54.111 - - [02/Sep/2026:11:49:22 +0200] "POST //xmlrpc.php HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.48.54.111 - - [02/Sep/2026:11:49:23 +0200] "POST //xmlrpc.php HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.48.54.111 - - [02/Sep/2026:11:49:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.48.54.111 - - [02/Sep/2026:11:49:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.48.54.111 - - [02/Sep/2026:11:49:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 446 "-" "Mozilla
...
show less
Hacking
Web App Attack
Anonymous
2026-09-02 09:47:26
UTC ·
(2 months ago)
(wordpress) Failed wordpress login from 34.48.54.111 (US/United States/111.54.48.34.bc.googleusercontent.com)
Brute-Force
🇪🇸
masterguru
2026-09-02 09:35:33
UTC ·
(2 months ago)
(xmlrpc) Failed xmlrpc access from 34.48.54.111 (US/United States/111.54.48.34.bc.googleusercontent.com): 5 in the last 3600 secs (0-122)
Hacking
🇩🇪
FD-IX
2026-09-02 09:22:55
UTC ·
(2 months ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-09-02 09:14:59
UTC ·
(2 months ago)
34.48.54.111 - - [02/Sep/2026:11:14:59 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "pingusmc.org"
...
Brute-Force
Web App Attack
🇩🇪
netclix.gr
2026-09-02 09:12:34
UTC ·
(2 months ago)
(wordpress) Failed wordpress login from 34.48.54.111 (US/United States/111.54.48.34.bc.googleusercontent.com): (CF_ENABLE)
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-09-02 09:12:29
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇨🇭
backslash
2026-09-02 09:12:00
UTC ·
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
Anonymous
2026-09-02 09:07:05
UTC ·
(2 months ago)
34.48.54.111 - - [02/Sep/2026:06:07:04 -0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:0 ...
show more
34.48.54.111 - - [02/Sep/2026:06:07:04 -0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:06:07:04 -0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 1807 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:06:07:04 -0300] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:06:07:04 -0300] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.48.54.111 - - [02/Sep/2026:06:07:05 -0300] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 207 "-" "Mozilla/5.0 (W
...
show less
Port Scan