๐บ๐ธ
lostswordfish.com
2026-10-21 16:06:05
(2 hours ago)
Wordfence waf block on wp20190711M4
Web App Attack
๐ฎ๐ฑ
Dolphi
2026-10-21 15:42:13
(3 hours ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-21 15:34:24
(3 hours ago)
21/Oct/2026:15:34:20 +0000;34.75.53.54;"-"
21/Oct/2026:15:34:21 +0000;34.75.53.54;"/create-event/wp- ...
show more
21/Oct/2026:15:34:20 +0000;34.75.53.54;"-"
21/Oct/2026:15:34:21 +0000;34.75.53.54;"/create-event/wp-includes/wlwmanifest.xml"
21/Oct/2026:15:34:22 +0000;34.75.53.54;"/create-event/xmlrpc.php?rsd"
21/Oct/2026:15:34:23 +0000;34.75.53.54;"/create-event/blog/wp-includes/wlwmanifest.xml"
21/Oct/2026:15:34:23 +0000;34.75.53.54;"/create-event/web/wp-includes/wlwmanifest.xml"
21/Oct/2026:15:34:23 +0000;34.75.53.54;"/create-event/wordpress/wp-includes/wlwmanifest.xml"
21/Oct/2026:15:34:24 +0000;34.75.53.54;"/create-event/website/wp-includes/wlwmanifest.xml"
...
show less
Web Spam
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-21 15:30:44
(3 hours ago)
(mod_security) mod_security (id:225170) triggered by 34.75.53.54 (54.53.75.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 34.75.53.54 (54.53.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 11:30:37.455510 2026] [security2:error] [pid 8480:tid 8480] [client 34.75.53.54:49225] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.seizinthebook.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.seizinthebook.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atjanTxz80tlfE9wANv7owAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-21 15:30:04
(3 hours ago)
CrowdSec decision: crowdsecurity/http-probing (origin: crowdsec)
Web App Attack
๐บ๐ธ
WPJoe
2026-10-21 15:27:55
(3 hours ago)
34.75.53.54 - - [21/Oct/2026:15:27:53 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 472 "-" "Mozilla/5. ...
show more
34.75.53.54 - - [21/Oct/2026:15:27:53 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.75.53.54 - - [21/Oct/2026:15:27:54 +0000] "POST //xmlrpc.php HTTP/1.1" 403 472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
๐ฌ๐ง
venus.launch.bz
2026-10-21 15:27:12
(3 hours ago)
(wpscan) WordPress probe detected from 34.75.53.54 (US/United States/54.53.75.34.bc.googleuserconten ...
show more
(wpscan) WordPress probe detected from 34.75.53.54 (US/United States/54.53.75.34.bc.googleusercontent.com)
show less
Hacking
๐จ๐ญ
backslash
2026-10-21 15:27:01
(3 hours ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ซ๐ท
dynamix
2026-10-21 15:24:27
(3 hours ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐ฉ๐ช
kernel-error.de
2026-10-21 15:22:48
(3 hours ago)
::ffff:34.75.53.54 - - [21/Oct/2026:17:22:46 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
::ffff:34.75.53.54 - - [21/Oct/2026:17:22:46 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 5719 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
::ffff:34.75.53.54 - - [21/Oct/2026:17:22:46 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
::ffff:34.75.53.54 - - [21/Oct/2026:17:22:47 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5719 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
::ffff:34.75.53.54 - - [21/Oct/2026:17:22:47 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5719 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
::ffff:34.75.53.54 - - [21/Oct/2026:17:22:47 +0200] "GET //wordpress/wp-includes/wlwmanifest.
...
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-21 15:15:45
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฉ๐ช
maxpower
2026-10-21 15:11:45
(3 hours ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.75.53.54 (US/United States/54.53.75.34.bc.g ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.75.53.54 (US/United States/54.53.75.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/21 17:11:42 [error] 3849665#3849665: *5703824 access forbidden by rule, client: 34.75.53.54, server: centromedicodiianni.it, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "centromedicodiianni.it"
2026/10/21 17:11:43 [error] 3849665#3849665: *5703824 access forbidden by rule, client: 34.75.53.54, server: centromedicodiianni.it, request: "GET //?author=1 HTTP/1.1", host: "centromedicodiianni.it"
2026/10/21 17:11:43 [error] 3849665#3849665: *5703824 access forbidden by rule, client: 34.75.53.54, server: centromedicodiianni.it, request: "GET //?author=2 HTTP/1.1", host: "centromedicodiianni.it"
show less
Port Scan
๐ฎ๐น
VHosting
2026-10-21 15:10:03
(3 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-21 15:07:26
(3 hours ago)
15 attempts against mh-modsecurity-ban on ethyl
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-10-21 15:07:14
(3 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.teddypot.space | URI: //xmlrpc.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36 | BODY: <?xml version="1.0"?><methodCall><methodName>system.multicall</methodName><params><param><value><array><data> <value><struct><member><name>methodName</name><value><string>wp.getUsersBlogs</string></value></member><member><name>params</name><value><array><data><value><array><data><value><string>admin</string></value><value>
show less
Bad Web Bot
Web App Attack