๐ณ๐ฑ
JCB
2026-09-02 20:03:00
(4 hours ago)
/wp-includes/wlwmanifest.xml
Brute-Force
Web App Attack
๐บ๐ธ
infra-monitor
2026-09-02 12:00:04
(12 hours ago)
Automated ban via infra-monitor: wp-sensitive-paths, wordpress-probe
Web App Attack
๐ต๐ฑ
strefapi_com
2026-09-02 11:46:07
(12 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-02 11:43:56
(12 hours ago)
cloudlinux2 fail2ban: 2026-09-02 13:38:54,522 fail2ban.filter [1472]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-02 13:38:54,522 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 193.36.224.78 - 2026-09-02 13:38:54cloudlinux2 fail2ban: 2026-09-02 13:39:01,071 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 103.74.73.124 - 2026-09-02 13:39:00cloudlinux2 fail2ban: 2026-09-02 13:39:01,464 fail2ban.filter [1472]: INFO [recidive] Found 103.74.73.124 - 2026-09-02 13:39:01cloudlinux2 fail2ban: 2026-09-02 13:38:58,996 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 193.36.224.78 - 2026-09-02 13:38:58cloudlinux2 fail2ban: 2026-09-02 13:39:01,459 fail2ban.actions [1472]: NOTICE [plesk-modsecurity] Ban 103.74.73.124cloudlinux2 fail2ban: 2026-09-02 13:39:35,171 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 23.94.155.128 - 2026-09-02 13:39:34cloudlinux2 fail2ban: 2026-09-02 13:41:58,860 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 45.131.195.126 - 2026-09-02 13:41:58cloudlinux2 fail2ban: 2026-09-02 13
show less
Web App Attack
๐บ๐ธ
OceanTreasure
2026-09-02 11:37:20
(13 hours ago)
tcp/443; WordPress XML-RPC brute force attempt: "GET //xmlrpc.php?rsd" @ 2026-09-02T11:32:23Z [proxy ...
show more
tcp/443; WordPress XML-RPC brute force attempt: "GET //xmlrpc.php?rsd" @ 2026-09-02T11:32:23Z [proxy]
show less
Brute-Force
Anonymous
2026-09-02 11:35:05
(13 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฌ๐ง
Mendip_Defender
2026-09-02 11:34:58
(13 hours ago)
34.60.10.103 - - [02/Sep/2026:12:35:08 +0100] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 6420 ...
show more
34.60.10.103 - - [02/Sep/2026:12:35:08 +0100] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 6420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.60.10.103 - - [02/Sep/2026:12:35:09 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.60.10.103 - - [02/Sep/2026:12:35:09 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-02 11:26:12
(13 hours ago)
15 attempts against mh-modsecurity-ban on storm
Brute-Force
Web App Attack
๐ฎ๐น
ipald
2026-09-02 11:25:41
(13 hours ago)
MIoT SecOps: Web probe: wordpress-probe
Web App Attack
Anonymous
2026-09-02 11:17:15
(13 hours ago)
[redacted] 34.60.10.103 - - [02/Sep/2026:13:17:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 34.60.10.103 - - [02/Sep/2026:13:17:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.60.10.103 - - [02/Sep/2026:13:17:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.60.10.103 - - [02/Sep/2026:13:17:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.60.10.103 - - [02/Sep/2026:13:17:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.60.10.103 - - [02/Sep/2026:13:17:12 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4
...
show less
Hacking
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-02 11:17:07
(13 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐ฉ๐ช
Marc
2026-09-02 11:14:06
(13 hours ago)
34.60.10.103 - - [02/Sep/2026:13:14:04 +0200] "POST //xmlrpc.php HTTP/1.1" 403 871 "-" "Mozilla/5.0 ...
show more
34.60.10.103 - - [02/Sep/2026:13:14:04 +0200] "POST //xmlrpc.php HTTP/1.1" 403 871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.60.10.103 - - [02/Sep/2026:13:14:05 +0200] "POST //xmlrpc.php HTTP/1.1" 403 871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.60.10.103 - - [02/Sep/2026:13:14:04 +0200] "POST //xmlrpc.php HTTP/1.1" 403 871 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-02 11:10:04
(13 hours ago)
10 attempts against mh-misc-ban on eris
Web App Attack
๐ฉ๐ช
on-com
2026-09-02 11:04:32
(13 hours ago)
URL scan
Brute-Force
Web App Attack
๐ณ๐ด
jad-abuse
2026-09-02 11:01:49
(13 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 32 hits.
show less
Brute-Force
Web App Attack