๐บ๐ธ
S.O.B.A. Dev.
2026-05-31 14:57:40
(3 days ago)
Threat Blocked by BeeHive from (ASN:210558) (Network:1337 Services GmbH) (Host:soba.dev) (Method:GET ...
show more
Threat Blocked by BeeHive from (ASN:210558) (Network:1337 Services GmbH) (Host:soba.dev) (Method:GET) (Protocol:HTTP/1.1) (Timestamp:2026-05-31T14:57:40Z)
show less
Brute-Force
Web Spam
Web App Attack
๐ฉ๐ช
reznekcs
2026-05-31 14:52:51
(3 days ago)
F2B wordpress ban. Logs: 45.92.1.242 - - [31/May/2026:16:52:50 +0200] "POST /xmlrpc.php HTTP/1.1" 20 ...
show more
F2B wordpress ban. Logs: 45.92.1.242 - - [31/May/2026:16:52:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.92.1.242 - - [31/May/2026:16:52:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ฉ๐ช
4server
2026-05-31 13:14:41
(3 days ago)
[SunMay3115:14:37.3779732026][security2:error][pid1202382:tid1202427][client45.92.1.242:0]ModSecurit ...
show more
[SunMay3115:14:37.3779732026][security2:error][pid1202382:tid1202427][client45.92.1.242:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"morandi-trasporti.ch\"][uri\"/xmlrpc.php\"][unique_id\"ahw0PR7jC3RlI-bOrfovsQAAABg\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
reznekcs
2026-05-31 13:12:29
(3 days ago)
F2B wordpress ban. Logs: 45.92.1.242 - - [31/May/2026:15:12:28 +0200] "POST /xmlrpc.php HTTP/1.1" 20 ...
show more
F2B wordpress ban. Logs: 45.92.1.242 - - [31/May/2026:15:12:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.92.1.242 - - [31/May/2026:15:12:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Skyrider
2026-05-31 10:54:57
(3 days ago)
crowdsecurity/http-probing
Hacking
๐ฎ๐ฉ
soc-yk
2026-05-31 09:54:12
(3 days ago)
Type: suspicious_network_activity
Threat: unknown
Risk: 100
Events: 226
Evidence:
- Persistent susp ...
show more
Type: suspicious_network_activity
Threat: unknown
Risk: 100
Events: 226
Evidence:
- Persistent suspicious network activity detected
- Repeated hostile operational behavior observed
- Multi-event operational persistence identified
show less
Port Scan
Hacking
๐ฌ๐ง
consul.to
2026-05-31 09:29:56
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-05-31 09:20:04
(3 days ago)
45.92.1.242 - - [31/May/2026:11:20:03 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" ...
show more
45.92.1.242 - - [31/May/2026:11:20:03 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.92.1.242 - - [31/May/2026:11:20:03 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.92.1.242 - - [31/May/2026:11:20:03 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.92.1.242 - - [31/May/2026:11:20:03 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.92.1.242 - - [31/May/2026:11:20:04 +0200] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 437
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
Charlesiv
2026-05-31 06:00:31
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 210558 (1337 Services Gm ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 210558 (1337 Services GmbH)
Protocol: HTTP/1.1 (GET method)
Endpoint: /site/wp-includes/wlwmanifest.xml
Timestamp: 2026-05-31T05:26:46Z
Ray ID: a04390cb3b53f5cb
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
show less
Bad Web Bot
๐จ๐ฟ
huginet
2026-05-31 02:41:17
(3 days ago)
45.92.1.242 - - [31/May/2026:04:41:16 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 196 "- ...
show more
45.92.1.242 - - [31/May/2026:04:41:16 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
45.92.1.242 - - [31/May/2026:04:41:16 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Web Spam
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-05-31 02:16:09
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
bescared
2026-05-31 02:11:59
(3 days ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
Kenshin869
2026-05-31 01:46:06
(3 days ago)
Wordpress unauthorized access attempt
Brute-Force
๐ฉ๐ช
Gwyneth Llewelyn
2026-05-31 01:20:57
(3 days ago)
Brute-Force
Web App Attack
Anonymous
2026-05-31 00:46:22
(3 days ago)
Failed Wordpress Logins
Web App Attack