๐บ๐ธ
han35
2026-10-21 06:00:03
(23 hours ago)
ProtocolSecure - WP honeypot: /wp-includes/ID3/license.txt (kez: 5)
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
francelink.fr
2026-10-21 00:52:30
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T06:51:00.000Z.
Web App Attack
๐ง๐ช
cmbplf
2026-10-20 10:10:04
(1 day ago)
8.618 requests with url.path */wp-includes/wlwmanifest.xml
1.202 requests with url.path //xmlrpc.p ...
show more
8.618 requests with url.path */wp-includes/wlwmanifest.xml
1.202 requests with url.path //xmlrpc.php
show less
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-20 07:24:31
(1 day ago)
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 8.234.182.202 - - [20/Oct/2026:09:24:09 +0200] "POST //xmlrpc.php HTTP/1.1" 200 677 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.182.202 - - [20/Oct/2026:09:24:09 +0200] "POST /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 404 36554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.182.202 - - [20/Oct/2026:09:24:09 +0200] "POST /wp-includes/id3/license.txt/xmlrpc.php HTTP/1.1" 404 36554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.182.202 - - [20/Oct/2026:09:24:09
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 07:15:54
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
mnsf
2026-10-20 07:05:19
(1 day ago)
Abuse Detected (12)
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-10-20 06:53:48
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
๐บ๐ธ
francelink.fr
2026-10-20 06:50:24
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T06:49:29.000Z.
Web App Attack
๐ณ๐ฑ
javierin
2026-10-20 06:47:17
(1 day ago)
8.234.182.202 - centroasturiano.es - - [20/Oct/2026:06:47:15 +0000] "GET //blog/wp-includes/wlwmanif ...
show more
8.234.182.202 - centroasturiano.es - - [20/Oct/2026:06:47:15 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 12797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.182.202 - centroasturiano.es - - [20/Oct/2026:06:47:16 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 12797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.182.202 - centroasturiano.es - - [20/Oct/2026:06:47:16 +0000] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 12797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.182.202 - centroasturiano.es - - [20/Oct/2026:06:47:16 +0000] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 12797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.
...
show less
Hacking
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-20 06:45:34
(1 day ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐จ๐ญ
backslash
2026-10-20 06:33:00
(1 day ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐บ๐ธ
Agaman
2026-10-20 06:26:06
(1 day ago)
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:26 UTC. Samples: ...
show more
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-20 06:26 UTC. Samples: GET //xmlrpc.php 444; GET //blog/wp-includes/wlwmanifest.xml 444. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). Detected by fail2ban.
show less
Web App Attack
๐ซ๐ท
[email protected]
2026-10-20 06:18:46
(1 day ago)
PrestaShop Security Module: Calls WordPress paths probing known vulnerabilities
Web App Attack
๐ฑ๐น
NotACaptcha
2026-10-20 06:11:27
(1 day ago)
webserver:443 [20/Oct/2026] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 470 "-" "Mozilla/5 ...
show more
webserver:443 [20/Oct/2026] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
webserver:443 [20/Oct/2026] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
webserver:443 [20/Oct/2026] "GET //xmlrpc.php?rsd HTTP/1.1" 404 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
webserver:443 [20/Oct/2026] "GET //feed/ HTTP/1.1" 404 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
webserver:443 [20/Oct/2026] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 5269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
webserver:...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-10-20 06:10:05
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack