๐ง๐ช
cmbplf
2026-10-16 16:32:28
(3 hours ago)
4.157 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2026-10-16 14:50:03
(5 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ท๐ด
iulianh
2026-10-16 14:41:11
(5 hours ago)
80,443
Brute-Force
SSH
๐ฉ๐ช
lolyay
2026-10-16 14:38:22
(5 hours ago)
34.6.2.42 - - [16/Oct/2026:14:38:21 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 200 4 "-" "Mo ...
show more
34.6.2.42 - - [16/Oct/2026:14:38:21 +0000] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.6.2.42 - - [16/Oct/2026:14:38:21 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
๐ณ๐ฑ
thedreamer.nl
2026-10-16 14:31:45
(6 hours ago)
34.6.2.42 - - [16/Oct/2026:16:29:12 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 401 0 "-" "M ...
show more
34.6.2.42 - - [16/Oct/2026:16:29:12 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
34.6.2.42 - - [16/Oct/2026:16:29:12 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
34.6.2.42 - - [16/Oct/2026:16:29:12 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
34.6.2.42 - - [16/Oct/2026:16:29:12 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "NL" "Groningen" "53.22220
...
show less
Hacking
Brute-Force
๐ฉ๐ช
yitzhaq
2026-10-16 14:26:24
(6 hours ago)
34.6.2.42 - - [16/Oct/2026:16:26:19 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" " ...
show more
34.6.2.42 - - [16/Oct/2026:16:26:19 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.6.2.42 - - [16/Oct/2026:16:26:19 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.6.2.42 - - [16/Oct/2026:16:26:20 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.6.2.42 - - [16/Oct/2026:16:26:20 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.6.2.42 - - [16/Oct/2026:16:26:20 +0200] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozil
show less
Web App Attack
Hacking
Anonymous
2026-10-16 14:20:08
(6 hours ago)
[news.tmg.gr] httpd-xmlrpc-post: sites=www.physio-kinisi.gr; logs=/var/log/httpd/domains/physio-kini ...
show more
[news.tmg.gr] httpd-xmlrpc-post: sites=www.physio-kinisi.gr; logs=/var/log/httpd/domains/physio-kinisi.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-10-16 14:13:44
(6 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.astropot.tech | URI: //xmlrpc.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 | BODY: <?xml version="1.0"?><methodCall><methodName>system.multicall</methodName><params><param><value><array><data> <value><struct><member><name>methodName</name><value><string>wp.getUsersBlogs</string></value></member><member><name>params</name><value><array><data><value><array><data><value><string>admin</string></value><value><
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-16 14:10:03
(6 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack