๐ฉ๐ช
ghostwarriors
2026-09-15 15:50:18
(13 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-09-15 15:48:20
(13 hours ago)
[redacted] 34.86.23.164 - - [15/Sep/2026:17:48:13 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 34.86.23.164 - - [15/Sep/2026:17:48:13 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.86.23.164 - - [15/Sep/2026:17:48:13 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.86.23.164 - - [15/Sep/2026:17:48:14 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.86.23.164 - - [15/Sep/2026:17:48:15 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 34.86.23.164 - - [15/Sep/2026:17:48:16 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla
...
show less
Hacking
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-15 15:45:22
(13 hours ago)
34.86.23.164 - - [15/Sep/2026:17:45:19 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.86.23.164 - - [15/Sep/2026:17:45:19 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.86.23.164 - - [15/Sep/2026:17:45:19 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.86.23.164 - - [15/Sep/2026:17:45:19 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.86.23.164 - - [15/Sep/2026:17:45:19 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.86.23.164 - - [15/Sep/2026:17:45:18 +0200] "GET / HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Windows N
show less
Web App Attack
Hacking
๐บ๐ธ
WizardsToolkit
2026-09-15 15:39:45
(13 hours ago)
tried to access forbidden files; attempted to access //blog/wp-includes/wlwmanifest.xml
Web App Attack
๐ง๐ท
Halux
2026-09-15 15:14:35
(13 hours ago)
34.86.23.164 Web Application Firewall multiple violations
Hacking
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-09-15 15:14:20
(13 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ณ๐ฟ
Tripwire
2026-09-15 15:11:25
(13 hours ago)
Scanning for exploits - //wp-includes/ID3/license.txt
Web App Attack
๐ง๐ท
noconex
2026-09-15 15:10:06
(13 hours ago)
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN WordPress Scanner Performing Multiple Reque ...
show more
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN WordPress Scanner Performing Multiple Requests to Windows Live Writer XML) detectado de 34.86.23.164
show less
Port Scan
Brute-Force
SSH
๐ฉ๐ช
AetherFox
2026-09-15 15:07:09
(13 hours ago)
AetherFox VoidGuard detected: [Tue Sep 15 15:07:08.627275 2026] [authz_core:error] [pid 2445704:tid ...
show more
AetherFox VoidGuard detected: [Tue Sep 15 15:07:08.627275 2026] [authz_core:error] [pid 2445704:tid 2445712] [client 34.86.23.164:61803] AH01630: client denied by server configuration: proxy:http://[MASKED]/
[Tue Sep 15 15:07:08.627449 2026] [authz_core:error] [pid 2445704:tid 2445712] [client 34.86.23.164:61803] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Tue Sep 15 15:07:08.797173 2026] [authz_core:error] [pid 2445704:tid 2445710] [client 34.86.23.164:61803] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
[Tue Sep 15 15:07:08.996340 2026] [authz_core:error] [pid 2445704:tid 2445736] [client 34.86.23.164:65355] AH01630: client denied by server configuration: proxy:http://[MASKED]/feed/
[Tue Sep 15 15:07:08.996614 2026] [authz_core:error] [pid 2445704:tid 2445736] [client 34.86.23.164:65355] AH01630: client denied by server configuration: /var/www/html/ERRORpages/403.html
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-15 15:02:46
(13 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐ฎ๐น
VHosting
2026-09-15 15:00:06
(13 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-15 14:59:35
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack