๐บ๐ธ
8.229.133.54
15 Aug 2026
Web app vulnerability scanning detected. Evidence: 8.229.133.54 - - [15/Aug/2026:01:00:15 +0000] "GE ...
show more
Web app vulnerability scanning detected. Evidence: 8.229.133.54 - - [15/Aug/2026:01:00:15 +0000] "GET /.aws/credentials HTTP/1.1" 404 11236 "https://www.arkapi.dev/.aws/credentials" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"
show less
Web App Attack
๐ณ๐ฑ
93.123.109.10
14 Aug 2026
Web app vulnerability scanning detected. Evidence: 93.123.109.10 - - [14/Aug/2026:23:49:55 +0000] "G ...
show more
Web app vulnerability scanning detected. Evidence: 93.123.109.10 - - [14/Aug/2026:23:49:55 +0000] "GET /config.env HTTP/1.1" 404 42240 "https://[DOMAIN]/config.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
93.123.109.10 - - [14/Aug/2026:23:49:56 +0000] "GET /.aws/credentials HTTP/1.1" 404 42248 "https://[DOMAIN]/.aws/credentials" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Web App Attack
๐บ๐ธ
173.236.254.75
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 173.236.254.75 - - [14/Aug/2026 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 173.236.254.75 - - [14/Aug/2026:23:14:46 +0000] "GET /wp-login.php HTTP/1.1" 200 8198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
173.236.254.75 - - [14/Aug/2026:23:14:47 +0000] "POST /wp-login.php HTTP/1.1" 503 20486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
20.75.217.64
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 20.75.217.64 - - [14/Aug/2026:2 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 20.75.217.64 - - [14/Aug/2026:22:58:07 +0000] "GET /wp-login.php HTTP/1.1" 200 8091 "https://[DOMAIN]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
20.75.217.64 - - [14/Aug/2026:22:58:08 +0000] "POST /wp-login.php HTTP/1.1" 503 20075 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
163.252.137.255
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 163.252.137.255 - - [14/Aug/202 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 163.252.137.255 - - [14/Aug/2026:22:47:35 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2F[DOMAIN]%2F HTTP/1.1" 200 8435 "https://[DOMAIN]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
163.252.137.255 - - [14/Aug/2026:22:47:35 +0000] "GET /wp-admin/js/user-profile.min.js?ver=5ea54eb9e1e827b8f295d6519c79c53f HTTP/1.1" 200 9310 "https://[DOMAIN]/wp-login.php?redirect_to=https%3A%2F%2F[DOMAIN]%2F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
35.247.98.226
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 35.247.98.226 - - [14/Aug/2026: ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 35.247.98.226 - - [14/Aug/2026:22:18:02 +0000] "GET /xmlrpc.php HTTP/1.1" 403 6159 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
35.247.98.226 - - [14/Aug/2026:22:18:06 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 403 6159 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
35.232.215.74
14 Aug 2026
Web app vulnerability scanning detected. Evidence: 35.232.215.74 - - [14/Aug/2026:22:15:18 +0000] "G ...
show more
Web app vulnerability scanning detected. Evidence: 35.232.215.74 - - [14/Aug/2026:22:15:18 +0000] "GET /@fs/.env.development?raw?? HTTP/1.1" 404 6451 "https://www.arkapi.dev/@fs/.env.development?raw??" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"
35.232.215.74 - - [14/Aug/2026:22:15:18 +0000] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 6451 "https://www.arkapi.dev/@fs/root/.aws/credentials?raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
show less
Web App Attack
๐บ๐ธ
104.28.196.79
14 Aug 2026
Web brute-force / failed auth detected. Evidence: [Fri Aug 14 21:38:17.163447 2026] [authz_core:erro ...
show more
Web brute-force / failed auth detected. Evidence: [Fri Aug 14 21:38:17.163447 2026] [authz_core:error] [pid 2993442] [client 104.28.196.79:0] AH01630: client denied by server configuration: [WEB_ROOT]/wp-content/uploads/backups/index.php
[Fri Aug 14 21:38:17.177645 2026] [authz_core:error] [pid 2997312] [client 104.28.196.79:0] AH01630: client denied by server configuration: [WEB_ROOT]/backups/index.php
show less
Brute-Force
Web App Attack
๐ฉ๐ช
78.47.223.134
14 Aug 2026
SSH brute-force detected. Evidence: 2026-08-14T20:59:37.026442[HOSTNAME] sshd[2997808]: error: maxim ...
show more
SSH brute-force detected. Evidence: 2026-08-14T20:59:37.026442[HOSTNAME] sshd[2997808]: error: maximum authentication attempts exceeded for root from 78.47.223.134 port 37910 ssh2 [preauth]
2026-08-14T20:59:38.915020[HOSTNAME] sshd[2997810]: error: maximum authentication attempts exceeded for root from 78.47.223.134 port 37914 ssh2 [preauth]
show less
Brute-Force
SSH
๐บ๐ธ
216.38.28.47
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 216.38.28.47 - - [14/Aug/2026:2 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 216.38.28.47 - - [14/Aug/2026:20:01:06 +0000] "GET /wp-login.php HTTP/1.1" 200 8091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
34.11.209.174
14 Aug 2026
Vulnerability scanning / script probing detected. Evidence: [Fri Aug 14 19:37:25.710460 2026] [php:e ...
show more
Vulnerability scanning / script probing detected. Evidence: [Fri Aug 14 19:37:25.710460 2026] [php:error] [pid 2993635] [client 34.11.209.174:0] script '/var/www/arkfaucet.com/phpinfo.php' not found or unable to stat
[Fri Aug 14 19:37:25.710460 2026] [php:error] [pid 2993635] [client 34.11.209.174:0] script '/var/www/arkfaucet.com/phpinfo.php' not found or unable to stat
[Fri Aug 14 19:37:25.720691 2026] [php:error] [pid 2995062] [client 34.11.209.174:0] script '/var/www/arkfaucet.com/info.php' not found or unable to stat
[Fri Aug 14 19:37:25.720691 2026] [php:error] [pid 2995062] [client 34.11.209.174:0] script '/var/www/arkfaucet.com/info.php' not found or unable to stat
[Fri Aug 14 19:37:25.774451 2026] [php:error] [pid 2995064] [client 34.11.209.174:0] script '/var/www/arkfaucet.com/pi.php' not found or unable to stat
show less
Web App Attack
๐บ๐ธ
68.183.106.31
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 68.183.106.31 - - [14/Aug/2026: ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 68.183.106.31 - - [14/Aug/2026:17:37:35 +0000] "GET /wp-login.php HTTP/1.1" 200 8198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
192.185.2.154
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 192.185.2.154 - - [14/Aug/2026: ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 192.185.2.154 - - [14/Aug/2026:17:30:25 +0000] "GET /wp-login.php HTTP/1.1" 200 8091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
192.185.2.154 - - [14/Aug/2026:17:30:26 +0000] "POST /wp-login.php HTTP/1.1" 503 24885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
162.243.30.173
14 Aug 2026
Web app vulnerability scanning detected. Evidence: 162.243.30.173 - - [14/Aug/2026:17:23:36 +0000] " ...
show more
Web app vulnerability scanning detected. Evidence: 162.243.30.173 - - [14/Aug/2026:17:23:36 +0000] "GET /_profiler/phpinfo HTTP/1.1" 404 42249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
162.243.30.173 - - [14/Aug/2026:17:23:49 +0000] "GET /_profiler/open?file=.env HTTP/1.1" 404 42260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
show less
Web App Attack
๐บ๐ธ
35.199.60.181
14 Aug 2026
Web brute-force / failed auth detected. Evidence: [Fri Aug 14 17:02:14.812429 2026] [access_compat:e ...
show more
Web brute-force / failed auth detected. Evidence: [Fri Aug 14 17:02:14.812429 2026] [access_compat:error] [pid 2987898] [client 35.199.60.181:0] AH01797: client denied by server configuration: [WEB_ROOT]/xmlrpc.php
[Fri Aug 14 17:02:15.440286 2026] [access_compat:error] [pid 2987898] [client 35.199.60.181:0] AH01797: client denied by server configuration: [WEB_ROOT]/xmlrpc.php
show less
Brute-Force
Web App Attack
๐ธ๐ฌ
101.47.28.226
14 Aug 2026
SSH brute-force detected. Evidence: 2026-08-14T16:43:33.917684[HOSTNAME] sshd[2989055]: Invalid user ...
show more
SSH brute-force detected. Evidence: 2026-08-14T16:43:33.917684[HOSTNAME] sshd[2989055]: Invalid user user from 101.47.28.226 port 54820
2026-08-14T16:43:35.723399[HOSTNAME] sshd[2989058]: Invalid user user from 101.47.28.226 port 54830
show less
Brute-Force
SSH
๐บ๐ธ
70.32.23.67
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 70.32.23.67 - - [14/Aug/2026:16 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 70.32.23.67 - - [14/Aug/2026:16:37:45 +0000] "GET /wp-login.php HTTP/1.1" 200 8198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
70.32.23.67 - - [14/Aug/2026:16:37:45 +0000] "POST /wp-login.php HTTP/1.1" 503 25318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
67.217.246.215
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 67.217.246.215 - - [14/Aug/2026 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 67.217.246.215 - - [14/Aug/2026:16:00:42 +0000] "GET /wp-login.php HTTP/1.1" 200 8091 "https://[DOMAIN]/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
173.254.104.138
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 173.254.104.138 - - [14/Aug/202 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 173.254.104.138 - - [14/Aug/2026:15:13:19 +0000] "GET /wp-login.php HTTP/1.1" 200 8198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
45.153.34.217
14 Aug 2026
Web app vulnerability scanning detected. Evidence: 45.153.34.217 - - [14/Aug/2026:14:36:08 +0000] "G ...
show more
Web app vulnerability scanning detected. Evidence: 45.153.34.217 - - [14/Aug/2026:14:36:08 +0000] "GET /phpinfo HTTP/1.1" 404 42237 "http://[DOMAIN]/phpinfo" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
45.153.34.217 - - [14/Aug/2026:14:36:08 +0000] "GET /phpinfo.php HTTP/1.1" 404 37256 "http://[DOMAIN]/phpinfo.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
show less
Web App Attack
๐บ๐ธ
104.196.39.169
14 Aug 2026
Web brute-force / failed auth detected. Evidence: [Fri Aug 14 13:37:49.600715 2026] [access_compat:e ...
show more
Web brute-force / failed auth detected. Evidence: [Fri Aug 14 13:37:49.600715 2026] [access_compat:error] [pid 2981788] [client 104.196.39.169:0] AH01797: client denied by server configuration: [WEB_ROOT]/xmlrpc.php
[Fri Aug 14 13:37:50.807219 2026] [access_compat:error] [pid 2981788] [client 104.196.39.169:0] AH01797: client denied by server configuration: [WEB_ROOT]/xmlrpc.php
show less
Brute-Force
Web App Attack
๐บ๐ธ
108.167.161.148
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 108.167.161.148 - - [14/Aug/202 ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 108.167.161.148 - - [14/Aug/2026:13:28:15 +0000] "GET /wp-login.php HTTP/1.1" 200 8091 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
๐บ๐ธ
34.60.193.133
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 34.60.193.133 - - [14/Aug/2026: ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 34.60.193.133 - - [14/Aug/2026:13:17:48 +0000] "GET /wp-login.php HTTP/1.1" 200 3280 "https://[DOMAIN]/login" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.60.193.133 - - [14/Aug/2026:13:17:53 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2F[DOMAIN]%2Fwp-admin%2F&reauth=1 HTTP/1.1" 200 5339 "https://[DOMAIN]/wp-admin/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
show less
Brute-Force
Web App Attack
๐ฉ๐ช
157.230.18.161
14 Aug 2026
Web app vulnerability scanning detected. Evidence: 157.230.18.161 - - [14/Aug/2026:13:06:16 +0000] " ...
show more
Web app vulnerability scanning detected. Evidence: 157.230.18.161 - - [14/Aug/2026:13:06:16 +0000] "GET /.env HTTP/1.1" 404 755 "-" "python-requests/2.34.2"
157.230.18.161 - - [14/Aug/2026:13:06:17 +0000] "GET /.env HTTP/1.1" 404 5572 "-" "python-requests/2.34.2"
show less
Web App Attack
๐บ๐ธ
64.182.46.134
14 Aug 2026
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 64.182.46.134 - - [14/Aug/2026: ...
show more
WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 64.182.46.134 - - [14/Aug/2026:13:03:02 +0000] "GET /wp-login.php HTTP/1.1" 200 8198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack