Anonymous
2026-11-13 16:02:02
UTC ยท
(1 day ago)
[_admin] cross-host-offender: auto: cross-host offender โ banned on 3 hosts [httpd-suspicious-path,httpd-xmlrpc-post,tcp-conn-over-cap]
Hacking
Web App Attack
Anonymous
2026-11-13 10:43:02
UTC ยท
(1 day ago)
[ns65.kdns.gr] httpd-suspicious-path: sites=www.nikoltsioslaw.com; logs=/var/log/httpd/access_log,/var/log/httpd/domains/nikoltsioslaw.com.log; samples=//wp-includes/wlwmanifest.xml | //blog/wp-includes/wlwmanifest.xml | //web/wp-includes/wlwmanifest ...
show more
[ns65.kdns.gr] httpd-suspicious-path: sites=www.nikoltsioslaw.com; logs=/var/log/httpd/access_log,/var/log/httpd/domains/nikoltsioslaw.com.log; samples=//wp-includes/wlwmanifest.xml | //blog/wp-includes/wlwmanifest.xml | //web/wp-includes/wlwmanifest.xml
show less
Hacking
Web App Attack
๐ฉ๐ช
spam.must.die
2026-11-13 10:42:54
UTC ยท
(1 day ago)
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.90.145.108 - - [13/Nov/2026:10:42:50 +0000] "POST //xmlrpc.php HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537 ...
show more
Fail2Ban jail [xmlrpc]: Hacking,Web App Attack - 34.90.145.108 - - [13/Nov/2026:10:42:50 +0000] "POST //xmlrpc.php HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"34.90.145.108 - - [13/Nov/2026:10:42:51 +0000] "POST //xmlrpc.php HTTP/1.1" 200 625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"34.90.145.108 - - [13/Nov/2026:10:42:51 +0000] "POST //xmlrpc.php HTTP/1.1" 200 5641 "-"
show less
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-11-13 10:37:14
UTC ยท
(1 day ago)
[ti-26al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.90.145.108 - - [13/Nov/2026:11:37:11 +0100] "GET /site/login/xmlrpc.php?rsd HTTP/1.1" 404 6122 "-" "Mozilla/5.0 (Windows NT 10.0; ...
show more
[ti-26al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.90.145.108 - - [13/Nov/2026:11:37:11 +0100] "GET /site/login/xmlrpc.php?rsd HTTP/1.1" 404 6122 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.90.145.108 - - [13/Nov/2026:11:37:11 +0100] "GET /shop/xmlrpc.php?rsd HTTP/1.1" 404 5988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.90.145.108 - - [13/Nov/2026:11:37:11 +0100] "GET /shop/xmlrpc.php?rsd HTTP/1.1" 404 5988 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
34.90.145.108 - - [13/Nov/2026:11:37:11 +0100] "GET /site/lo
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-11-13 10:34:09
UTC ยท
(1 day ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐ฉ๐ช
NCWeb
2026-11-13 10:30:00
UTC ยท
(1 day ago)
Crawling for Wordpress installations: "//sito/wp-includes/wlwmanifest.xml"
Web App Attack
Hacking
๐ณ๐ฑ
e.fierstra
2026-11-13 10:29:30
UTC ยท
(1 day ago)
excessive HTTP 404 errors
Bad Web Bot
๐ฉ๐ช
pltcldvlpr
2026-11-13 10:27:28
UTC ยท
(1 day ago)
CMS/framework probe: 34.90.145.108 - - [13/Nov/2026:11:27:28 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" asn=396 ...
show more
CMS/framework probe: 34.90.145.108 - - [13/Nov/2026:11:27:28 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" asn=396982 org="Google LLC" country=NL
...
show less
Web App Attack
๐ง๐ช
cmbplf
2026-11-13 10:24:04
UTC ยท
(1 day ago)
1.061 requests with url.path */wp-includes/wlwmanifest.xml
185 requests with url.path //xmlrpc.php
Brute-Force
Bad Web Bot
๐ฆ๐บ
A.i.D.A.N.N
2026-11-13 10:10:28
UTC ยท
(1 day ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
Web App Attack
๐บ๐ธ
ruusvuu
2026-11-13 10:06:06
UTC ยท
(1 day ago)
Automated abuse report: 15 attack/probe requests from Google LLC / NL.
Targeted paths: //wp-includes/wlwmanifest.xml, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml.
Sample ...
show more
Automated abuse report: 15 attack/probe requests from Google LLC / NL.
Targeted paths: //wp-includes/wlwmanifest.xml, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml.
Sample log lines:
[mir-com] [11/13/2026, 3:06:05 AM] GET .mirregistry.com//wp2/wp-includes/wlwmanifest.xml 404 34.90.145.108 - 3.465 ms
[mir-com] [11/13/2026, 3:06:05 AM] GET .mirregistry.com//site/wp-includes/wlwmanifest.xml 404 34.90.145.108 - 3.585 ms
[mir-com] [11/13/2026, 3:06:06 AM] GET .mirregistry.com//cms/wp-includes/wlwmanifest.xml 404 34.90.145.108 - 3.667 ms
Detected by an automated web-server log monitor.
show less
Web App Attack
๐จ๐ญ
backslash
2026-11-13 10:06:00
UTC ยท
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ฎ๐น
VHosting
2026-11-13 10:00:11
UTC ยท
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-11-13 03:26:10
UTC ยท
(1 day ago)
Reported by internal abuse tracking
DDoS Attack
Web App Attack