🇵🇱
nfsec.pl
2026-09-11 13:29:44
(1 minute ago)
78.145.208.58 - - [11/Sep/2026:13:29:42 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 2066 "-" "Mozilla ...
show more
78.145.208.58 - - [11/Sep/2026:13:29:42 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 2066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:13:29:43 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:13:29:43 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 6283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:13:29:43 +0000] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 6283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:13:29:43 +0000] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 403 6284 "-
...
show less
Web App Attack
Exploited Host
🇭🇺
cybertailor
2026-09-11 13:10:45
(20 minutes ago)
78.145.208.58 - - [11/Sep/2026:18:10:41 +0500] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 ...
show more
78.145.208.58 - - [11/Sep/2026:18:10:41 +0500] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:18:10:42 +0500] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:18:10:42 +0500] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:18:10:42 +0500] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [11/Sep/2026:18:10:42 +0500] "GET //test/wp-includes/wlwmanifest.xml HTTP/1.1" 40
...
show less
Web App Attack
🇨🇭
lufi
2026-09-11 13:04:44
(26 minutes ago)
2026-09-11 15:04:44 78.145.208.58: blacklisted Pattern: wp-includes/
...
Web Spam
Brute-Force
Hacking
Web App Attack
🇩🇪
LRob
2026-09-11 13:04:21
(27 minutes ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: //wp-json/wp/v2/users/ | 2026-09-11 13:04 UTC
show less
Hacking
Web App Attack
🇨🇭
backslash
2026-09-11 12:42:00
(49 minutes ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇧🇪
cmbplf
2026-08-09 22:34:02
(1 month ago)
311 requests with url.path //xmlrpc.php
204 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇵🇱
rafamiga
2026-08-09 21:37:00
(1 month ago)
78.145.208.58:14267 [09/Aug/2026:21:37:47.407] 404 182 PR {GB|*.pl||Mozilla/5.0 (Windows NT 10.0; Wi ...
show more
78.145.208.58:14267 [09/Aug/2026:21:37:47.407] 404 182 PR {GB|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36|13285} "GET https://*.pl//wp-includes/ID3/license.txt HTTP/2.0"
78.145.208.58:14267 [09/Aug/2026:21:37:47.529] 404 182 PR {GB|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36|13285} "GET https://*.pl//feed/ HTTP/2.0"
78.145.208.58:14267 [09/Aug/2026:21:37:47.663] 404 182 PR {GB|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36|13285} "GET https://*.pl//xmlrpc.php?rsd HTTP/2.0"
78.145.208.58:14267 [09/Aug/2026:21:37:47.780] 503 216 SC {GB|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36|13285} "GET https://*.pl//blog/wp-includes/wlwmanifest.xml HTTP/2.0"
78.145.208.58:14267 [09/Aug/2026:21:37:47.852] 503 216 SC {GB|*.pl||Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36|13285} "GET https://*.pl//web/wp-includes/wlwmanifest.xml HTTP/2.0"
show less
Port Scan
Brute-Force
🇩🇪
big-cloud.nl
2026-08-09 21:18:26
(1 month ago)
Try to access /xmlrpc.php?rsd
Web App Attack
Anonymous
2026-08-09 21:07:41
(1 month ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=16
Hacking
🇩🇪
nyt
2026-08-09 21:05:54
(1 month ago)
Empty UA + error, Request for xmlrpc.php, often targeted by attackers
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-08-09 20:50:03
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-08-09 20:32:46
(1 month ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
Anonymous
2026-08-09 20:12:14
(1 month ago)
Bad Web Bot
🇺🇸
ipblock.com
2026-08-09 18:57:00
(1 month ago)
IPBlock protected site ID [2711-bg].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇳🇴
cybertailor
2026-08-09 18:48:16
(1 month ago)
78.145.208.58 - - [09/Aug/2026:23:48:12 +0500] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 ...
show more
78.145.208.58 - - [09/Aug/2026:23:48:12 +0500] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [09/Aug/2026:23:48:13 +0500] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
78.145.208.58 - - [09/Aug/2026:23:48:13 +0500] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack