๐ณ๐ฑ
JCB
2026-06-22 08:58:00
(10 hours ago)
44.244.81.56 - - [21/Jun/2026:18:04:27 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 236 "- ...
show more
44.244.81.56 - - [21/Jun/2026:18:04:27 +0300] "GET /wp-includes/css/buttons.css HTTP/1.1" 404 236 "-" "Go-http-client/1.1"
...
show less
Web App Attack
๐ฉ๐ช
niedson
2026-06-21 16:30:02
(1 day ago)
Automated honeypot trigger: scanner probing decoy admin/credential paths (e.g. /wp-admin, /phpmyadmi ...
show more
Automated honeypot trigger: scanner probing decoy admin/credential paths (e.g. /wp-admin, /phpmyadmin). Request dropped (HTTP 444) and source IP firewalled. Reported automatically.
show less
Port Scan
Web App Attack
๐บ๐ธ
NerdyMcNerderson
2026-06-21 15:29:07
(1 day ago)
MarekCloud auto-ban: WordPress scanner: GET /wp-includes/css/buttons.css
Bad Web Bot
Web App Attack
๐บ๐ธ
doll.gl
2026-06-21 14:34:27
(1 day ago)
44.244.81.56 - - [21/Jun/2026:14:34:26 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 200 280 "h ...
show more
44.244.81.56 - - [21/Jun/2026:14:34:26 +0000] "GET /wp-includes/css/buttons.css HTTP/1.1" 200 280 "http://doll.gl/wp-includes/css/buttons.css" "Go-http-client/2.0"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
directorioeducativo.com
2026-06-21 14:04:36
(1 day ago)
GET URL: "/wp-includes/css/buttons.css"Agent: "Go-http-client/2.0"
Web App Attack
๐บ๐ธ
ambor
2026-06-21 13:36:27
(1 day ago)
Honeypot triggered: /wp-includes/css/buttons.css on ifebridge.com. User-Agent: Go-http-client/1.1. M ...
show more
Honeypot triggered: /wp-includes/css/buttons.css on ifebridge.com. User-Agent: Go-http-client/1.1. Method: GET
show less
Web App Attack
๐ฆ๐บ
Anytech
2026-06-21 13:32:26
(1 day ago)
Blocked by Conn-Monitor: Automated bot activity
Web App Attack
๐บ๐ธ
ArturShelby
2026-06-21 13:22:00
(1 day ago)
Suspicious path access: /wp-includes/css/buttons.css
Web App Attack
๐บ๐ธ
ambor
2026-06-21 13:00:08
(1 day ago)
Honeypot access: WordPress installation path scan. Path: /wp-includes/css/buttons.css
Brute-Force
Web App Attack
๐ฉ๐ช
netclix.gr
2026-06-21 12:26:46
(1 day ago)
(wordpress) Failed wordpress login from 44.244.81.56 (US/United States/ec2-44-244-81-56.us-west-2.co ...
show more
(wordpress) Failed wordpress login from 44.244.81.56 (US/United States/ec2-44-244-81-56.us-west-2.compute.amazonaws.com): (CF_ENABLE)
show less
Brute-Force
๐ธ๐ฌ
IDnX
2026-06-21 12:02:14
(1 day ago)
44.244.81.56 - - [21/Jun/2026:19:02:12 +0700] "POST //xmlrpc.php HTTP/2.0" 200 403 "-" "Mozilla/5.0 ...
show more
44.244.81.56 - - [21/Jun/2026:19:02:12 +0700] "POST //xmlrpc.php HTTP/2.0" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
44.244.81.56 - - [21/Jun/2026:19:02:13 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
44.244.81.56 - - [21/Jun/2026:19:02:13 +0700] "POST //xmlrpc.php HTTP/2.0" 200 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
44.244.81.56 - - [21/Jun/2026:19:02:13 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
44.244.81.56 - - [21/Jun/2026:19:02:13 +0700] "POST //xmlrpc.php HTTP/2.0" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
show less
Brute-Force
๐ฉ๐ช
LRob.fr
2026-06-21 12:00:04
(1 day ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ฉ๐ช
LRob.fr
2026-06-21 11:15:07
(1 day ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
๐ฉ๐ช
todix
2026-06-21 10:36:11
(1 day ago)
WebAttack or semilar from 44.244.81.56
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-21 10:33:17
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 44.244.81.56 (ec2-44-244-81-56.us-west-2.comput ...
show more
(mod_security) mod_security (id:225170) triggered by 44.244.81.56 (ec2-44-244-81-56.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 06:33:09.318201 2026] [security2:error] [pid 27892:tid 27908] [client 44.244.81.56:49528] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.asetiadi.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.asetiadi.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "aje95eHOP9cPCqT5QjkFWwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack