๐ฎ๐ฑ
spd.co.il
2026-08-08 01:02:13
(2 weeks ago)
Web application attack detected
Hacking
Web App Attack
๐ฉ๐ช
LRob
2026-08-07 11:41:31
(2 weeks ago)
CrowdSec: crowdsecurity/http-cve-probing | req: /wp-json/batch/v1 | UA: Mozilla/5.0 (Windows NT 10.0 ...
show more
CrowdSec: crowdsecurity/http-cve-probing | req: /wp-json/batch/v1 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
show less
Web App Attack
๐ฉ๐ช
grassau.com
2026-08-07 04:08:02
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 13.57.32.170 (US/United States/Californ ...
show more
(mod_security) mod_security triggered on hostname [redacted] 13.57.32.170 (US/United States/California/San Jose/ec2-13-57-32-170.us-west-1.compute.amazonaws.com)
show less
SQL Injection
Anonymous
2026-08-07 03:52:45
(2 weeks ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-08-07 03:20:07
(2 weeks ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-08-07 03:12:31
(2 weeks ago)
13.57.32.170 - - [07/Aug/2026:05:12:26 +0200] "GET /?rest_route=/ HTTP/1.1" 200 195056 "-" "Mozilla/ ...
show more
13.57.32.170 - - [07/Aug/2026:05:12:26 +0200] "GET /?rest_route=/ HTTP/1.1" 200 195056 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
13.57.32.170 - - [07/Aug/2026:05:12:28 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 4579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
13.57.32.170 - - [07/Aug/2026:05:12:28 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 403 4580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
13.57.32.170 - - [07/Aug/2026:05:12:29 +0200] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 403 4578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
13.57.32.170 - - [07/Aug/2026:05:12:29 +0200] "POST /?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 207 5475 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi
show less
Web App Attack
Hacking
Anonymous
2026-08-07 01:13:12
(2 weeks ago)
Bot / seems abusive / Apache connections: 20
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
Anonymous
2026-08-06 19:46:08
(2 weeks ago)
13.57.32.170 - - [06/Aug/2026:21:45:55 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.5 ...
show more
13.57.32.170 - - [06/Aug/2026:21:45:55 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.57.32.170 - - [06/Aug/2026:21:45:56 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 847
13.57.32.170 - - [06/Aug/2026:21:45:57 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.57.32.170 - - [06/Aug/2026:21:45:58 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.57.32.170 - - [06/Aug/2026:21:45:59 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 847
13.57.32.170 - - [06/Aug/2026:21:46:01 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.57.32.170 - - [06/Aug/2026:21:46:02 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.57.32.170 - - [06/Aug/2026:21:46:03 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.57.32.170 - - [06/Aug/2026:21:46:04 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
13.57.32.170 - - [06/Aug/2026:21:46:05 +0200] "POST /?rest_route=/batch/./v1 HTTP/1.1" 404 2387
...
show less
Web Spam
Web App Attack
Anonymous
2026-08-06 19:26:09
(2 weeks ago)
[osotir.org] httpd-404: sites=www.prostiniki.gr; logs=/var/log/httpd/domains/prostiniki.gr.log; samp ...
show more
[osotir.org] httpd-404: sites=www.prostiniki.gr; logs=/var/log/httpd/domains/prostiniki.gr.log; samples=/?rest_route=%252Fbatch%252Fv1 | /?rest_route=/./batch/v1 | /?rest_route=/batch/./v1
show less
Web App Attack
๐ง๐ช
cmbplf
2026-08-06 19:09:58
(2 weeks ago)
17.513 post requests in 1 hour (2w3d1h)
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-08-06 17:24:55
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
Tha_14
2026-08-06 15:59:43
(2 weeks ago)
Too many erroneous requests
Web App Attack
๐ธ๐ช
pentesting.se
2026-08-06 15:48:51
(2 weeks ago)
Automated WordPress 'wp2shell' core-RCE exploitation. ~600 POST batch-endpoint with path/case-evasio ...
show more
Automated WordPress 'wp2shell' core-RCE exploitation. ~600 POST batch-endpoint with path/case-evasion (/wp-json/Batch/v1, /wp-json//batch/v1).
show less
Web App Attack
Hacking
๐บ๐ธ
masterguru
2026-08-06 05:23:47
(2 weeks ago)
Detects MSSQL code execution and information gathering attempts. Pattern match "(?i:(?: (942190-169)
Hacking
๐บ๐ธ
antlac1
2026-08-06 05:19:47
(2 weeks ago)
LePresidente/http-generic-403-bf
Brute-Force
Web App Attack