๐ง๐ช
cmbplf
2026-10-25 18:30:14
(7 hours ago)
4.876 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐บ๐ธ
mnsf
2026-10-25 18:05:14
(7 hours ago)
Too many Status 40X (14)
Brute-Force
Web App Attack
Anonymous
2026-10-25 17:39:00
(8 hours ago)
34.85.199.20 - - [25/Oct/2026:18:38:41 +0100] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1 ...
show more
34.85.199.20 - - [25/Oct/2026:18:38:41 +0100] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.85.199.20 - - [25/Oct/2026:18:38:41 +0100] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows N T 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.85.199.20 - - [25/Oct/2026:18:38:41 +0100] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows N T 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 34.85.199.20 - - [25/Oct/2026:18:38:41 +0100] "GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1"
show less
Web App Attack
Web Spam
๐จ๐ญ
Origon
2026-10-25 17:28:19
(8 hours ago)
http-probing - IP: 34.85.199.20 - time="2026-10-25T18:28:19+01:00" level=info msg="(555f66b4f6a7455 ...
show more
http-probing - IP: 34.85.199.20 - time="2026-10-25T18:28:19+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.85.199.20 (US/396982) : 4h ban on Ip 34.85.199.20" module=db
show less
Web App Attack
๐ฉ๐ช
AetherFox
2026-10-25 17:27:18
(8 hours ago)
AetherFox VoidGuard detected: [Sun Oct 25 17:27:14.723421 2026] [security2:error] [pid 403958:tid 40 ...
show more
AetherFox VoidGuard detected: [Sun Oct 25 17:27:14.723421 2026] [security2:error] [pid 403958:tid 403969] [client 34.85.199.20:52181] [client 34.85.199.20] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "34"] [id "100053"] [msg "wp-includes access blocked by AetherFox VoidGuard"] [hostname "ikosa-dragons.de"] [uri "/wp-includes/id3/license.txt/feed/"] [unique_id "at478jdG6zjTjLoRAjTlkQAAAEg"]
[Sun Oct 25 17:27:15.458287 2026] [security2:error] [pid 403958:tid 403975] [client 34.85.199.20:50422] [client 34.85.199.20] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 23.88.112.221" against "REMOTE_ADDR" required. [file "/etc/modsecurity/AetherFox.conf"] [line "34"] [id "100053"] [msg "wp-includes access blocked by AetherFox VoidGuard"] [hostname "ikosa-dragons.de"] [uri "/wp-includes/id3/license.txt/xmlrpc.php"] [unique_id "at478zdG6
...
show less
Hacking
Bad Web Bot
Anonymous
2026-10-25 17:27:15
(8 hours ago)
[serverforms.tmg.gr] httpd-suspicious-path: sites=www.forms.tmg.gr; logs=/var/log/httpd/domains/form ...
show more
[serverforms.tmg.gr] httpd-suspicious-path: sites=www.forms.tmg.gr; logs=/var/log/httpd/domains/forms.tmg.gr.log; samples=/wp-includes/ID3/license.txt | /blog/wp-includes/wlwmanifest.xml | /web/wp-includes/wlwmanifest.xml
show less
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-25 17:13:58
(8 hours ago)
cloudlinux2 fail2ban: 2026-10-25 18:08:44,125 fail2ban.filter [1922]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-10-25 18:08:44,125 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 193.56.116.96 - 2026-10-25 18:08:43cloudlinux2 fail2ban: 2026-10-25 18:08:57,724 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 189.217.106.97 - 2026-10-25 18:08:56cloudlinux2 fail2ban: 2026-10-25 18:09:17,693 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 34.85.199.20 - 2026-10-25 18:09:17cloudlinux2 fail2ban: 2026-10-25 18:09:14,749 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 34.85.199.20 - 2026-10-25 18:09:14cloudlinux2 fail2ban: 2026-10-25 18:09:47,473 fail2ban.actions [1922]: NOTICE [plesk-wordpress] Unban 156.230.182.127cloudlinux2 fail2ban: 2026-10-25 18:10:03,787 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 209.87.169.212 - 2026-10-25 18:10:03cloudlinux2 fail2ban: 2026-10-25 18:10:21,843 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 76.185.72.148 - 2026-10-25 18:10:21cloudlinux2 fail2ban: 202
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-25 17:13:49
(8 hours ago)
WordPress login brute force (wp-login/xmlrpc login attempts)
Brute-Force
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-10-25 17:11:19
(8 hours ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
๐ฎ๐น
VHosting
2026-10-25 17:10:03
(8 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
j-tap
2026-10-25 17:09:11
(8 hours ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
๐ฉ๐ช
Mr-Money
2026-10-25 17:06:42
(8 hours ago)
scenario: crowdsecurity/http-probing - events: 11
Web App Attack
Hacking
๐จ๐ญ
lufi
2026-10-25 17:04:54
(8 hours ago)
2026-10-25T18:04:53+01:00 lufischer04 ids442 2026-10-25 18:04:53 34.85.199.20: blacklisted Pattern: ...
show more
2026-10-25T18:04:53+01:00 lufischer04 ids442 2026-10-25 18:04:53 34.85.199.20: blacklisted Pattern: wp-includes/
...
show less
Web Spam
Brute-Force
Hacking
Web App Attack
๐จ๐ญ
zynex
2026-10-25 17:00:37
(8 hours ago)
URL Probing: /wp1/wp-includes/wlwmanifest.xml
Web App Attack