Anonymous
2026-06-23 09:07:01
(2 days ago)
Automated web scanner. Requested suspicious paths: //wp-includes/ID3/license.txt | //xmlrpc.php | // ...
show more
Automated web scanner. Requested suspicious paths: //wp-includes/ID3/license.txt | //xmlrpc.php | //web/wp-includes/wlwmanifest.xml | //wordpress/wp-includes/wlwmanifest.xml | //blog/wp-includes/wlwmanifest.xml | //wp/wp-includes/wlwmanifest.xml | //2020/wp-includes/wlwmanifest.xml | //2019/wp-includes/wlwmanifest.xml | //2021/wp-includes/wlwmanifest.xml | //shop/wp-includes/wlwmanifest.xml | //wp1/wp-includes/wlwmanifest.xml | //test/wp-includes/wlwmanifest.xml | //site/wp-includes/wlwmanifest.xml. UTC: 2026-06-23 08:07:59.
show less
Web App Attack
๐ฎ๐น
madaello
2026-06-23 08:28:24
(2 days ago)
8.234.195.0 - - [23/Jun/2026:10:28:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 646 "-" "Mozilla/5.0 ( ...
show more
8.234.195.0 - - [23/Jun/2026:10:28:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.195.0 - - [23/Jun/2026:10:28:22 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
8.234.195.0 - - [23/Jun/2026:10:28:23 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-06-23 08:19:01
(2 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-06-23 08:15:53
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 8.234.195.0 (0.195.234.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 8.234.195.0 (0.195.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:15:50.262497 2026] [security2:error] [pid 28562:tid 28580] [client 8.234.195.0:51184] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||maryschalkdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maryschalkdesign.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajpAtuCnzwm6bFrTbjCN-AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐ด
SpamStopper
2026-06-23 08:11:29
(2 days ago)
Fail2Ban - WordPress\(Anomis\) Looking for CMS/PHP/SQL vulnerabilities and hacked web hosts servers
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
venus.launch.bz
2026-06-23 08:10:55
(2 days ago)
(wpscan) WordPress probe detected from 8.234.195.0 (US/United States/0.195.234.8.bc.googleuserconten ...
show more
(wpscan) WordPress probe detected from 8.234.195.0 (US/United States/0.195.234.8.bc.googleusercontent.com)
show less
Hacking
๐บ๐ธ
mnsf
2026-06-23 08:07:33
(2 days ago)
Abuse Detected (12)
Brute-Force
Web App Attack
๐ง๐พ
lns.bz
2026-06-23 08:07:03
(2 days ago)
Too many 404 requests [BY]
Web App Attack
๐ง๐ช
cmbplf
2026-06-23 08:05:44
(2 days ago)
30.005 requests in 1 hour (1mo3w5d)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-23 08:00:11
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 8.234.195.0 (0.195.234.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:225170) triggered by 8.234.195.0 (0.195.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 04:00:04.360504 2026] [security2:error] [pid 27261:tid 27261] [client 8.234.195.0:57047] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mariarozella.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mariarozella.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajo9BHj3aeaKIYtTN3QOAQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
strefapi_com
2026-06-23 07:57:41
(2 days ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
NerdyMcNerderson
2026-06-23 07:57:33
(2 days ago)
MarekCloud auto-ban: PHP scanner: GET //xmlrpc.php
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-06-23 07:50:19
(2 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-23 07:49:58
(2 days ago)
8.234.195.0 - - [23/Jun/2026:15:49:57 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 ...
show more
8.234.195.0 - - [23/Jun/2026:15:49:57 +0800] "GET //xmlrpc.php?rsd HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
conseilgouz
2026-06-23 07:45:10
(2 days ago)
mae-7 : Trying access unauthorized files/dir=>//wp-includes/ID3/license.txt
Hacking