๐ญ๐บ
miszterx.hu
2026-09-23 06:59:07
(2 weeks ago)
XORP (haproxy): 30x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 30x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
๐ฉ๐ช
YF
2026-09-22 16:00:16
(2 weeks ago)
WordPress author enumeration
Web App Attack
๐ท๐บ
DZBOT
2026-09-22 15:59:39
(2 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
RamSet
2026-09-22 15:56:10
(2 weeks ago)
[pit,ycr] HTTP-Probe on port 443 (via domain). 16 distinct paths probed in 1s. Sustained 16 req/min, ...
show more
[pit,ycr] HTTP-Probe on port 443 (via domain). 16 distinct paths probed in 1s. Sustained 16 req/min, 16 nonexistent paths (404). Paths: /, //2019/wp-includes/wlwmanifest.xml, //2020/wp-includes/wlwmanifest.xml, //2021/wp-includes/wlwmanifest.xml, //blog/wp-includes/wlwmanifest.xml, //cms/wp-includes/wlwmanifest.xml, //feed/, //shop/wp-includes/wlwmanifest.xml, //site/wp-includes/wlwmanifest.xml, //test/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml, //wp-includes/ID3/license.txt, //wp/wp-includes/wlwmanifest.xml, //wp1/wp-includes/wlwmanifest.xml, //xmlrpc.php?rsd
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
pinguin
2026-09-22 15:54:35
(2 weeks ago)
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GE ...
show more
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: //test/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
Choice Tech LLC
2026-09-22 15:40:02
(2 weeks ago)
Blocked by OPNsense firewall; 9 hits, proto=tcp, ports=80
Port Scan
Hacking
๐ฉ๐ช
Lennart Kramer
2026-09-22 15:40:00
(2 weeks ago)
Restricted File Access Attempt | Matched phrase "*/wlwmanifest.xml" at /2020/wp-includes/wlwmanifest ...
show more
Restricted File Access Attempt | Matched phrase "*/wlwmanifest.xml" at /2020/wp-includes/wlwmanifest.xml | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
show less
Hacking
Web App Attack
Anonymous
2026-09-22 15:37:03
(2 weeks ago)
PSCSERV WPSCAN 34.73.80.170
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-22 15:36:25
(2 weeks ago)
34.73.80.170 - - [22/Sep/2026:17:36:25 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.73.80.170 - - [22/Sep/2026:17:36:25 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
loveprod
2026-09-22 15:35:47
(2 weeks ago)
34.73.80.170 - - [22/Sep/2026:18:35:45 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 301 2 ...
show more
34.73.80.170 - - [22/Sep/2026:18:35:45 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 301 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.73.80.170 - - [22/Sep/2026:18:35:46 +0300] "GET //wp/wp-includes/wlwmanifest.xml HTTP/2.0" 301 91 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Bad Web Bot
๐จ๐ญ
backslash
2026-09-22 15:27:00
(2 weeks ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ฉ๐ช
rh24
2026-09-22 15:23:43
(2 weeks ago)
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 34.73.80.170 (US/United States/170.80.7 ...
show more
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 34.73.80.170 (US/United States/170.80.73.34.bc.googleusercontent.com)
show less
Hacking
Anonymous
2026-09-22 15:18:21
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
zwebvigil
2026-09-22 15:15:22
(2 weeks ago)
34.73.80.170 [22/Sep/2026:08:15:22 -0700] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 22 "-" p ...
show more
34.73.80.170 [22/Sep/2026:08:15:22 -0700] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 22 "-" port=59431 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" "-" "<host>" 6852
34.73.80.170 [22/Sep/2026:08:15:22 -0700] "GET //feed/ HTTP/1.1" 404 22 "-" port=59431 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" "-" "<host>" 3440
34.73.80.170 [22/Sep/2026:08:15:22 -0700] "GET //xmlrpc.php?rsd HTTP/1.1" 404 22 "-" port=59431 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" "-" "<host>" 3823
34.73.80.170 [22/Sep/2026:08:15:22 -0700] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 22 "-" port=59431 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" "-" "<ho
show less
Web App Attack
Anonymous
2026-09-22 15:11:37
(2 weeks ago)
34.73.80.170 - - [22/Sep/2026:17:11:35 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 567 "- ...
show more
34.73.80.170 - - [22/Sep/2026:17:11:35 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.73.80.170 - - [22/Sep/2026:17:11:36 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.73.80.170 - - [22/Sep/2026:17:11:36 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.73.80.170 - - [22/Sep/2026:17:11:37 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.73.80.170 - - [22/Sep/2026:17:11:37 +0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-"
...
show less
Brute-Force
Web App Attack