|
Anonymous
|
|
Aggressive web scan
|
Web App Attack
|
|
🇪🇸
robotstxt
|
|
147.185.135.99 - - [21/Oct/2026:17:24:57 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) ...
show more
147.185.135.99 - - [21/Oct/2026:17:24:57 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.3 Safari/605.1.15" "-" edge="147.185.135.99"
147.185.135.99 - - [21/Oct/2026:17:24:57 +0000] "GET /wp-json/wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 Edg/113.0.1774.57" "-" edge="147.185.135.99"
147.185.135.99 - - [21/Oct/2026:17:24:57 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36" "-" edge="147.185.135.99"
147
...
show less
|
Web App Attack
|
|
🇪🇸
robotstxt
|
|
147.185.135.99 - - [13/Oct/2026:18:05:47 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) ...
show more
147.185.135.99 - - [13/Oct/2026:18:05:47 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15" "-" edge="147.185.135.99"
147.185.135.99 - - [13/Oct/2026:18:05:47 +0000] "GET /wp-json/wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15" "-" edge="147.185.135.99"
147.185.135.99 - - [13/Oct/2026:18:05:47 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" "-" edge="147.185.135.99"
147.185.1
...
show less
|
Web App Attack
|
|
🇪🇸
robotstxt
|
|
147.185.135.99 - - [11/Oct/2026:19:42:43 +0000] "GET /es/?__kubio-site-edit-iframe-preview=1&__kubio-site-edit-iframe-classic-template=../../../../../../../../etc/passwd HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.3 ...
show more
147.185.135.99 - - [11/Oct/2026:19:42:43 +0000] "GET /es/?__kubio-site-edit-iframe-preview=1&__kubio-site-edit-iframe-classic-template=../../../../../../../../etc/passwd HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-" edge="147.185.135.99"
147.185.135.99 - - [11/Oct/2026:19:42:44 +0000] "GET /?__kubio-site-edit-iframe-preview=1&__kubio-site-edit-iframe-classic-template=../../../../../../../../windows/win.ini HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" "-" edge="147.185.135.99"
147.185.135.99 - - [11/Oct/2026:19:42:44 +0000] "GET /es/?__kubio-site-edit-iframe-preview=1&__kubio-site-edit-iframe-classic-template=../../../../../../../../windows/win.ini HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Linux i686; rv:104.0esr) Gecko/20162109 Firefox/104.0esr" "-" edge="147.185.135.99"
147.185.135.99 - -
...
show less
|
Web App Attack
|
|
🇪🇸
robotstxt
|
|
147.185.135.99 - - [03/Oct/2026:16:51:22 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Windows NT 5.0) AppleWebKit/537.36 (KHTML like Gecko) Chrome/47.0.2526.106 S ...
show more
147.185.135.99 - - [03/Oct/2026:16:51:22 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Windows NT 5.0) AppleWebKit/537.36 (KHTML like Gecko) Chrome/47.0.2526.106 Safari/537.36" "-" edge="147.185.135.99"
147.185.135.99 - - [03/Oct/2026:16:51:22 +0000] "GET /wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts&return_type=html HTTP/1.1" 403 140 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" "-" edge="147.185.135.99"
147.185.135.99 - - [03/Oct/2026:16:51:22 +0000] "GET /es/wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts&return_type=html HTTP/1.1" 403 164 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" "-" edge="147.185.135.99"
147.185.135.99 - - [03/Oct/2026:16:51:23 +0
...
show less
|
Web App Attack
|
|
🇪🇸
robotstxt
|
|
147.185.135.99 - - [28/Sep/2026:17:18:42 +0000] "GET /es/wp-content/plugins/email-subscribers/readme.txt HTTP/1.1" 403 25849 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/9.1.2 Safari/537.86.7" "- ...
show more
147.185.135.99 - - [28/Sep/2026:17:18:42 +0000] "GET /es/wp-content/plugins/email-subscribers/readme.txt HTTP/1.1" 403 25849 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/601.7.8 (KHTML, like Gecko) Version/9.1.2 Safari/537.86.7" "-" edge="147.185.135.99"
147.185.135.99 - - [28/Sep/2026:17:18:42 +0000] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 Edg/100.0.1185.44" "-" edge="147.185.135.99"
147.185.135.99 - - [28/Sep/2026:17:18:42 +0000] "GET /wp-content/plugins/email-subscribers/readme.txt HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS; en-en) AppleWebKit/412 (KHTML, like Gecko) Safari/412" "-" edge="147.185.135.99"
147.185.135.99 - - [28/Sep/2026:17:18:42 +0000] "GET /xmlrpc.php/wp-content/plugins/email-subscribers/readme.txt HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.
...
show less
|
Web App Attack
|
|
🇺🇸
avgsmoe
|
|
CROWDSEC offender. Observed 1 times.
|
Port Scan
Brute-Force
Web App Attack
|
|
🇮🇪
RoboSOC
|
|
Microsoft Windows win.ini Access Attempt Detected , PTR: PTR record not found
|
Hacking
|
|
🇪🇸
robotstxt
|
|
147.185.135.99 - - [14/Aug/2026:17:03:58 +0000] "GET /wp-login.php/wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge ...
show more
147.185.135.99 - - [14/Aug/2026:17:03:58 +0000] "GET /wp-login.php/wp-json/lp/v1/courses/archive-course?template_path=%2Fetc%2Fpasswd&return_type=html HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 WorkStream/120.0.6099.225 Safari/537.36" "-" edge="147.185.135.99"
147.185.135.99 - - [14/Aug/2026:17:03:59 +0000] "GET /wp-login.php/wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2FSystem32%2Fdrivers%2Fetc%2Fhosts&return_type=html HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-TW; rv:1.9.2.4) Gecko/20100611 Firefox/3.6.4 GTB7.0 ( .NET CLR 3.5.30729)" "-" edge="147.185.135.99"
147.185.135.99 - - [14/Aug/2026:17:03:59 +0000] "GET /wp-login.php/wp-json/lp/v1/courses/archive-course?template_path=C:%2FWindows%2Fwin.ini&return_type=html HTTP/1.1" 404 140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36 Edg/102.0.1245.44
...
show less
|
Bad Web Bot
|
|
🇹🇷
neron
|
|
CrowdSec blocked: http:exploit detected via OPNsense firewall
|
Hacking
Web App Attack
|
|
Anonymous
|
|
|
Port Scan
|