๐ซ๐ท
Baking333
2026-08-31 23:28:23
(6 hours ago)
[redacted] 45.134.79.120 - - [01/Sep/2026:00:28:22 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 30 ...
show more
[redacted] 45.134.79.120 - - [01/Sep/2026:00:28:22 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 1554 0/45025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 45.134.79.120 - - [01/Sep/2026:00:28:22 +0100] "GET //[redacted]?rsd HTTP/1.1" 302 1554 0/67639 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
RH5
2026-08-31 14:16:07
(15 hours ago)
Restricted URL probing (/xmlrpc.php) (UTC 2026-08-31 14:16)
Web App Attack
Anonymous
2026-08-31 12:48:27
(16 hours ago)
45.134.79.120 - - [31/Aug/2026:14:48:23 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 " ...
show more
45.134.79.120 - - [31/Aug/2026:14:48:23 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.134.79.120 - - [31/Aug/2026:14:48:25 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.134.79.120 - - [31/Aug/2026:14:48:25 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.134.79.120 - - [31/Aug/2026:14:48:26 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.134.79.120 - - [31/Aug/2026:14:48:26 +0200] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
ambor
2026-08-31 07:00:34
(22 hours ago)
Honeypot access: PHP file scan attempt: //xmlrpc.php. Path: //xmlrpc.php
Web App Attack
๐บ๐ธ
solantex
2026-08-31 06:15:59
(23 hours ago)
Requested a path that does not exist in this application (backup/source artifact or foreign software ...
show more
Requested a path that does not exist in this application (backup/source artifact or foreign software path). Refused at nginx with 444.
show less
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-08-31 04:50:21
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-08-28 05:34:37
(4 days ago)
[FriAug2807:34:31.6876542026][security2:error][pid2207288:tid2207320][client45.134.79.120:0]ModSecur ...
show more
[FriAug2807:34:31.6876542026][security2:error][pid2207288:tid2207320][client45.134.79.120:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"chesasilva.ch\"][uri\"/xmlrpc.php\"][unique_id\"apEd51YNk1vJ65IXO_5xOAAAABc\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
YF
2026-08-28 03:00:14
(4 days ago)
WordPress author enumeration
Web App Attack
๐ซ๐ท
Baking333
2026-08-27 23:01:57
(4 days ago)
[redacted] 45.134.79.120 - - [27/Aug/2026:22:19:18 +0100] "GET //site/wp-includes/[redacted] HTTP/1. ...
show more
[redacted] 45.134.79.120 - - [27/Aug/2026:22:19:18 +0100] "GET //site/wp-includes/[redacted] HTTP/1.1" 302 1554 0/74492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 45.134.79.120 - - [27/Aug/2026:22:19:18 +0100] "GET //cms/wp-includes/[redacted] HTTP/1.1" 302 1554 0/70662 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
lcpacs
2026-08-27 21:59:31
(4 days ago)
Auto-flagged by honeypot: tripped /xmlrpc.php
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-27 21:19:17
(4 days ago)
[redacted] 45.134.79.120 - - [27/Aug/2026:22:19:16 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 30 ...
show more
[redacted] 45.134.79.120 - - [27/Aug/2026:22:19:16 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 6773 0/74496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" [redacted] 45.134.79.120 - - [27/Aug/2026:22:19:16 +0100] "GET //[redacted]?rsd HTTP/1.1" 302 1554 0/53448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ท๐บ
Albram
2026-08-27 19:35:16
(4 days ago)
Tries find Web server vulnerability
...
Hacking
Web App Attack
๐บ๐ธ
NXTwoThou
2026-08-27 17:36:07
(4 days ago)
BadRequest
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-08-27 16:35:15
(4 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-includes/ (Match: /wp-includes/)
show less
Hacking
Exploited Host
Web App Attack
๐ณ๐ฑ
javierin
2026-08-27 16:08:27
(4 days ago)
45.134.79.120 - employerbranding.es - - [27/Aug/2026:16:08:26 +0000] "GET //wp-includes/wlwmanifest. ...
show more
45.134.79.120 - employerbranding.es - - [27/Aug/2026:16:08:26 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.134.79.120 - employerbranding.es - - [27/Aug/2026:16:08:26 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.134.79.120 - employerbranding.es - - [27/Aug/2026:16:08:26 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.134.79.120 - employerbranding.es - - [27/Aug/2026:16:08:26 +0000] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36"
45.13
...
show less
Hacking
Web App Attack