π©πͺ
Trashware
2026-09-17 08:09:47
(3 days ago)
Troll got lost in Hellpot
Hacking
Bad Web Bot
Web App Attack
πΊπΈ
mnsf
2026-09-17 08:05:14
(3 days ago)
Abuse Detected (15)
Brute-Force
Web App Attack
π©πͺ
LRob
2026-09-17 07:57:06
(3 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: //wp-json/wp/v2/users/ | 2026-09-17 07:57 UTC
show less
Hacking
Web App Attack
π³π±
Site.eu
2026-09-17 07:56:33
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
π«π·
dynamix
2026-09-17 07:56:27
(3 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
π©πͺ
rh24
2026-09-17 07:55:57
(3 days ago)
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 35.237.166.93 (US/United States/93.166. ...
show more
(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 35.237.166.93 (US/United States/93.166.237.35.bc.googleusercontent.com)
show less
Hacking
π©πͺ
findlab
2026-09-17 07:55:01
(3 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
π«π·
breubit
2026-09-17 07:52:28
(3 days ago)
35.237.166.93 - - [17/Sep/2026:09:52:27 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 302 984 ...
show more
35.237.166.93 - - [17/Sep/2026:09:52:27 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 302 984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Web App Attack
π©πͺ
Blexyel
2026-09-17 07:48:23
(3 days ago)
35.237.166.93 - - [17/Sep/2026:09:48:23 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 167 ...
show more
35.237.166.93 - - [17/Sep/2026:09:48:23 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Brute-Force
Web App Attack
π«π·
mail.avx.gr
2026-09-17 07:47:35
(3 days ago)
(nginxWPSCANNER) nginx WordPress scanner detected from 35.237.166.93 (US/United States/South Carolin ...
show more
(nginxWPSCANNER) nginx WordPress scanner detected from 35.237.166.93 (US/United States/South Carolina/North Charleston/93.166.237.35.bc.googleusercontent.com)
show less
Hacking
Anonymous
2026-09-17 07:43:01
(3 days ago)
[redacted] 35.237.166.93 - - [17/Sep/2026:09:42:53 +0200] "POST //xmlrpc.php HTTP/1.1" 200 461 "-" " ...
show more
[redacted] 35.237.166.93 - - [17/Sep/2026:09:42:53 +0200] "POST //xmlrpc.php HTTP/1.1" 200 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 35.237.166.93 - - [17/Sep/2026:09:42:54 +0200] "POST //xmlrpc.php HTTP/1.1" 200 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 35.237.166.93 - - [17/Sep/2026:09:42:55 +0200] "POST //xmlrpc.php HTTP/1.1" 200 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 35.237.166.93 - - [17/Sep/2026:09:42:55 +0200] "POST //xmlrpc.php HTTP/1.1" 200 461 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 35.237.166.93 - - [17/Sep/2026:09:42:56 +0200] "POST //xmlrpc.php HTTP/1.1" 200 461 "-" "Mozilla/5.0 (Windo
...
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-17 07:41:02
(3 days ago)
(mod_security) mod_security (id:225170) triggered by 35.237.166.93 (93.166.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 35.237.166.93 (93.166.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 03:40:56.804357 2026] [security2:error] [pid 5923:tid 5923] [client 35.237.166.93:63179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.assheton.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.assheton.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aquZiLTDFckYnBUVOHSQ9gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-17 07:30:24
(3 days ago)
35.237.166.93 - - [17/Sep/2026:07:30:23 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 7361 ...
show more
35.237.166.93 - - [17/Sep/2026:07:30:23 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 200 73617 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π«π·
masterguru
2026-09-17 07:29:49
(3 days ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
π³π±
ipoac.nl
2026-09-17 07:26:31
(3 days ago)
-:443 35.237.166.93 - - [17/Sep/2026:09:26:28 +0200] - "GET //wp-includes/wlwmanifest.xml HTTP/1.1" ...
show more
-:443 35.237.166.93 - - [17/Sep/2026:09:26:28 +0200] - "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 1968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
show less
Bad Web Bot