๐ซ๐ท
conseilgouz
2026-10-22 06:56:06
(7 hours ago)
joe-Direct access to plugin not allowed.
Hacking
๐จ๐ญ
dalslab ltd
2026-10-22 06:45:51
(8 hours ago)
34.79.248.92 - - [22/Oct/2026:08:45:50 +0200] "" 400 0 "-" "-"
[22/Oct/2026:08:45:50 +0200] - 404 40 ...
show more
34.79.248.92 - - [22/Oct/2026:08:45:50 +0200] "" 400 0 "-" "-"
[22/Oct/2026:08:45:50 +0200] - 404 404 - GET https jf.dalslab.com "//wp-includes/ID3/license.txt" [Client 34.79.248.92] [Length 0] [Gzip -] [Sent-to 10.1.1.22] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
[22/Oct/2026:08:45:50 +0200] - 404 404 - GET https jf.dalslab.com "//feed/" [Client 34.79.248.92] [Length 0] [Gzip -] [Sent-to 10.1.1.22] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
[22/Oct/2026:08:45:51 +0200] - 404 404 - GET https jf.dalslab.com "//xmlrpc.php?rsd" [Client 34.79.248.92] [Length 0] [Gzip -] [Sent-to 10.1.1.22] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-"
[22/Oct/2026:08:45:51 +0200] - 404 404 - GET https jf.dalslab.com "//blog/wp-includes/wlwmanifest.xml" [Client 34.79.248.92] [Len
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ipoac.nl
2026-10-22 06:43:03
(8 hours ago)
-.nl:443 34.79.248.92 - - [22/Oct/2026:08:43:02 +0200] -.nl "GET //xmlrpc.php?rsd HTTP/1.1" 403 1972 ...
show more
-.nl:443 34.79.248.92 - - [22/Oct/2026:08:43:02 +0200] -.nl "GET //xmlrpc.php?rsd HTTP/1.1" 403 1972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-22 06:40:54
(8 hours ago)
34.79.248.92 - - [22/Oct/2026:06:40:34 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP ...
show more
34.79.248.92 - - [22/Oct/2026:06:40:34 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.79.248.92"
34.79.248.92 - - [22/Oct/2026:06:40:34 +0000] "GET //wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.79.248.92"
34.79.248.92 - - [22/Oct/2026:06:40:34 +0000] "GET //wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="34.79.248.92"
34.79.248.92 - - [22/Oct/2026:06:40:34 +0000] "GET //wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
...
show less
Web App Attack
Anonymous
2026-10-22 06:38:48
(8 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
๐ฎ๐น
VHosting
2026-10-22 06:35:03
(8 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-22 06:31:35
(8 hours ago)
[22/Oct/2026:09:31:34 +0300] -- 34.79.248.92 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-i ...
show more
[22/Oct/2026:09:31:34 +0300] -- 34.79.248.92 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/ID3/license.txt HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-22 06:30:53
(8 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
Anonymous
2026-10-22 06:30:07
(8 hours ago)
[news.tmg.gr] httpd-suspicious-path: sites=www.irad2022.gr; logs=/var/log/httpd/domains/irad2022.gr. ...
show more
[news.tmg.gr] httpd-suspicious-path: sites=www.irad2022.gr; logs=/var/log/httpd/domains/irad2022.gr.log; samples=//wp-includes/ID3/license.txt | //blog/wp-includes/wlwmanifest.xml | //web/wp-includes/wlwmanifest.xml
show less
Hacking
Web App Attack
๐จ๐ญ
Origon
2026-10-22 06:29:29
(8 hours ago)
http-probing - IP: 34.79.248.92 - time="2026-10-22T08:29:29+02:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 34.79.248.92 - time="2026-10-22T08:29:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.79.248.92 (BE/396982) : 4h ban on Ip 34.79.248.92" module=db
show less
Web App Attack
๐ช๐ธ
pipeline.es
2026-10-22 06:26:49
(8 hours ago)
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: in ...
show more
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: intranet.costaeste.es 34.79.248.92 - - [22/Oct/2026:08:26:15 +0200] \"GET //site/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 230 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack