๐บ๐ธ
lostswordfish.com
2026-10-26 04:02:04
(1 day ago)
Wordfence waf block on restore georgia
Web App Attack
๐ฉ๐ช
rh24
2026-10-26 03:58:53
(1 day ago)
(wordpress) Failed wordpress login from 34.61.208.38 (US/United States/38.208.61.34.bc.googleusercon ...
show more
(wordpress) Failed wordpress login from 34.61.208.38 (US/United States/38.208.61.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Brute-Force
๐ซ๐ท
spot
2026-10-26 03:55:55
(1 day ago)
34.61.208.38 - - [26/Oct/2026:03:55:54 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 4468 ...
show more
34.61.208.38 - - [26/Oct/2026:03:55:54 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 4468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
Hacking
๐ฉ๐ช
weiss
2026-10-26 03:55:21
(1 day ago)
CrowdSec automatic ban | Scenario: crowdsecurity/http-probing | Machine: pixel-edge | Duration: 4h
Hacking
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-10-26 03:51:52
(1 day ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ณ๐ฑ
thedreamer.nl
2026-10-26 03:47:40
(1 day ago)
34.61.208.38 - - [26/Oct/2026:04:44:52 +0100] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 " ...
show more
34.61.208.38 - - [26/Oct/2026:04:44:52 +0100] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "US" "Council Bluffs" "41.25910" "-95.85170"
34.61.208.38 - - [26/Oct/2026:04:44:52 +0100] "GET //feed/ HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "US" "Council Bluffs" "41.25910" "-95.85170"
34.61.208.38 - - [26/Oct/2026:04:44:52 +0100] "GET //xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "US" "Council Bluffs" "41.25910" "-95.85170"
34.61.208.38 - - [26/Oct/2026:04:44:53 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "US" "Council B
...
show less
Brute-Force
Bad Web Bot
๐ฌ๐ง
pinguin
2026-10-26 03:47:32
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: //2021/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-26 03:41:49
(1 day ago)
WordPress login brute force (wp-login/xmlrpc login attempts)
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-26 03:40:37
(1 day ago)
10 attempts against mh_ha-misc-ban on ethyl
Brute-Force
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-10-26 03:40:21
(1 day ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-includes/ (Match: /wp-includes/)
show less
Hacking
Exploited Host
Web App Attack
๐ช๐ธ
robotstxt
2026-10-26 03:39:03
(1 day ago)
34.61.208.38 - - [26/Oct/2026:03:38:58 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP ...
show more
34.61.208.38 - - [26/Oct/2026:03:38:58 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.61.208.38"
34.61.208.38 - - [26/Oct/2026:03:38:58 +0000] "GET //wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.61.208.38"
34.61.208.38 - - [26/Oct/2026:03:38:59 +0000] "GET //wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.61.208.38"
34.61.208.38 - - [26/Oct/2026:03:38:59 +0000] "GET //wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
...
show less
Web App Attack
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
2026-10-26 03:36:45
(1 day ago)
34.61.208.38 - - [25/Oct/2026:21:36:44 -0600] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.61.208.38 - - [25/Oct/2026:21:36:44 -0600] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
๐จ๐ญ
Origon
2026-10-26 03:27:35
(1 day ago)
http-probing - IP: 34.61.208.38 - time="2026-10-26T04:27:35+01:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 34.61.208.38 - time="2026-10-26T04:27:35+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.61.208.38 (US/396982) : 4h ban on Ip 34.61.208.38" module=db
show less
Web App Attack
๐จ๐ญ
backslash
2026-10-26 03:27:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ซ๐ท
dynamix
2026-10-26 03:24:01
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack