🇫🇷
SpaceHost-Server
2026-09-02 22:22:43
(1 day ago)
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-09-02 04:09:18
(2 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-01 22:22:22
(2 days ago)
Brute-Force
Web App Attack
🇩🇪
Blexyel
2026-09-01 12:07:03
(2 days ago)
34.71.123.36 - - [01/Sep/2026:14:07:03 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.71.123.36 - - [01/Sep/2026:14:07:03 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
🇺🇸
infra-monitor
2026-09-01 12:00:06
(2 days ago)
Automated ban via infra-monitor: wp-sensitive-paths, wordpress-probe
Web App Attack
🇫🇷
Stara
2026-09-01 11:55:18
(2 days ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
🇧🇾
lns.bz
2026-09-01 11:50:43
(2 days ago)
Too many 404 requests [BY]
Web App Attack
🇮🇱
Dolphi
2026-09-01 11:50:03
(2 days ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇫🇷
Baking333
2026-09-01 11:41:30
(2 days ago)
[redacted] 34.71.123.36 - - [01/Sep/2026:12:41:28 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" ...
show more
[redacted] 34.71.123.36 - - [01/Sep/2026:12:41:28 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 6783 0/60599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 34.71.123.36 - - [01/Sep/2026:12:41:28 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1564 0/58884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-01 11:39:59
(2 days ago)
[01/Sep/2026:14:39:59 +0300] -- 34.71.123.36 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-i ...
show more
[01/Sep/2026:14:39:59 +0300] -- 34.71.123.36 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/ID3/license.txt HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-01 11:39:36
(2 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇳🇱
Savvii
2026-09-01 11:39:12
(2 days ago)
10 attempts against mh-misc-ban on ethyl
Web App Attack
🇩🇪
macrob
2026-09-01 11:37:11
(2 days ago)
2026/09/01 11:37:09 [error] 2296394#2296394: *544168332 access forbidden by rule, client: 34.71.123. ...
show more
2026/09/01 11:37:09 [error] 2296394#2296394: *544168332 access forbidden by rule, client: 34.71.123.36, server: binixo.lk, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "binixo.lk"
2026/09/01 11:37:09 [error] 2296395#2296395: *544165990 access forbidden by rule, client: 34.71.123.36, server: binixo.com, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "binixo.com"
2026/09/01 11:37:09 [error] 2296398#2296398: *544149432 access forbidden by rule, client: 34.71.123.36, server: binixo.pl, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "binixo.pl"
...
show less
Web App Attack
🇵🇱
Budyn
2026-09-01 11:32:42
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: billing.definitelynotahoneypot.xyz | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 11:32:26
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 34.71.123.36 (36.123.71.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.71.123.36 (36.123.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:32:21.396600 2026] [security2:error] [pid 18966:tid 18966] [client 34.71.123.36:58591] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||billhumphreyresearch.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "billhumphreyresearch.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "apa3xdMXtBmiDOQ_86DWxAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack