๐ง๐ช
cmbplf
2026-06-23 10:07:53
(5 hours ago)
220.359 requests in 1 hour (1mo1d5h)
Brute-Force
Bad Web Bot
Anonymous
2026-06-23 10:07:01
(5 hours ago)
Automated web scanner. Requested suspicious paths: //wp-includes/ID3/license.txt | //web/wp-includes ...
show more
Automated web scanner. Requested suspicious paths: //wp-includes/ID3/license.txt | //web/wp-includes/wlwmanifest.xml | //blog/wp-includes/wlwmanifest.xml | //xmlrpc.php | //wordpress/wp-includes/wlwmanifest.xml | //wp/wp-includes/wlwmanifest.xml | //2020/wp-includes/wlwmanifest.xml | //2021/wp-includes/wlwmanifest.xml | //wp1/wp-includes/wlwmanifest.xml | //2019/wp-includes/wlwmanifest.xml | //test/wp-includes/wlwmanifest.xml | //shop/wp-includes/wlwmanifest.xml | //cms/wp-includes/wlwmanifest.xml | //site/wp-includes/wlwmanifest.xml. UTC: 2026-06-23 09:38:47.
show less
Web App Attack
๐ง๐ท
Vieira Filho
2026-06-23 10:06:35
(5 hours ago)
34.6.102.93 - - [23/Jun/2026:07:06:33 -0300] [hydro.vieirafilho.ind.br] "hydro.vieirafilho.ind.br" ...
show more
34.6.102.93 - - [23/Jun/2026:07:06:33 -0300] [hydro.vieirafilho.ind.br] "hydro.vieirafilho.ind.br" "GET //wp-includes/ID3/license.txt HTTP/1.1" 400 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 0.035
34.6.102.93 - - [23/Jun/2026:07:06:34 -0300] [hydro.vieirafilho.ind.br] "hydro.vieirafilho.ind.br" "GET //feed/ HTTP/1.1" 400 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 0.207
34.6.102.93 - - [23/Jun/2026:07:06:34 -0300] [hydro.vieirafilho.ind.br] "hydro.vieirafilho.ind.br" "GET //xmlrpc.php?rsd HTTP/1.1" 400 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 0.342
34.6.102.93 - - [23/Jun/2026:07:06:34 -0300] [hydro.vieirafilho.ind.br] "hydro.vieirafilho.ind.br" "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 400 90 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
Brute-Force
Web App Attack
Exploited Host
๐บ๐ธ
mnsf
2026-06-23 10:05:42
(5 hours ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
๐บ๐ธ
Lezetho
2026-06-23 10:00:29
(5 hours ago)
DDoS, WebSpam, Web Attack, and Brute-force blocked by Cloudflare
DDoS Attack
Email Spam
Hacking
Brute-Force
๐บ๐ธ
Charlesiv
2026-06-23 10:00:26
(5 hours ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /test/wp-includes/wlwmanifest.xml
Timestamp: 2026-06-23T09:28:43Z
Ray ID: a10276d95af944aa
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
show less
Bad Web Bot
๐ฉ๐ช
big-cloud.nl
2026-06-23 09:58:14
(5 hours ago)
Try to access /huisje-huren/wp-includes/id3/license.txt/xmlrpc.php
Web App Attack
๐ฉ๐ช
AetherFox
2026-06-23 09:48:50
(5 hours ago)
AetherFox VoidGuard detected: [Tue Jun 23 09:48:49.599274 2026] [authz_core:error] [pid 1855061:tid ...
show more
AetherFox VoidGuard detected: [Tue Jun 23 09:48:49.599274 2026] [authz_core:error] [pid 1855061:tid 1855101] [client 34.6.102.93:63524] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/wp-includes/ID3/license.txt
[Tue Jun 23 09:48:49.599429 2026] [authz_core:error] [pid 1855061:tid 1855101] [client 34.6.102.93:63524] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Tue Jun 23 09:48:49.807591 2026] [authz_core:error] [pid 1855061:tid 1855106] [client 34.6.102.93:63524] AH01630: client denied by server configuration: proxy:https://hq.draconigen.net.dedivirt4209.your-server.de/feed/
[Tue Jun 23 09:48:49.807817 2026] [authz_core:error] [pid 1855061:tid 1855106] [client 34.6.102.93:63524] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Tue Jun 23 09:48:50.000941 2026] [authz_core:error] [pid 1855061:tid 1855111] [client 34.6.102.93:63524] AH0163
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-06-23 09:40:03
(6 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
loebas
2026-06-23 09:29:46
(6 hours ago)
34.6.102.93 - - [23/Jun/2026:11:29:45 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 8491 " ...
show more
34.6.102.93 - - [23/Jun/2026:11:29:45 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 8491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.6.102.93 - - [23/Jun/2026:11:29:45 +0200] "GET //feed/ HTTP/1.1" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.6.102.93 - - [23/Jun/2026:11:29:45 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 570 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.6.102.93 - - [23/Jun/2026:11:29:45 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.6.102.93 - - [23/Jun/2026:11:29:45 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A
...
show less
Bad Web Bot
Web App Attack
๐จ๐ญ
Origon
2026-06-23 09:24:33
(6 hours ago)
http-probing - IP: 34.6.102.93 - time="2026-06-23T11:24:33+02:00" level=info msg="(555f66b4f6a74558 ...
show more
http-probing - IP: 34.6.102.93 - time="2026-06-23T11:24:33+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.6.102.93 (NL/396982) : 4h ban on Ip 34.6.102.93" module=db
show less
Web App Attack
๐จ๐ญ
backslash
2026-06-23 09:18:00
(6 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
Anonymous
2026-06-23 09:08:28
(6 hours ago)
[redacted] 34.6.102.93 - - [23/Jun/2026:11:08:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mo ...
show more
[redacted] 34.6.102.93 - - [23/Jun/2026:11:08:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.6.102.93 - - [23/Jun/2026:11:08:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.6.102.93 - - [23/Jun/2026:11:08:12 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.6.102.93 - - [23/Jun/2026:11:08:13 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.6.102.93 - - [23/Jun/2026:11:08:16 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Wind
...
show less
Hacking
Web App Attack