๐ฉ๐ช
findlab
2026-10-09 14:55:01
(3 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-09 14:23:11
(4 days ago)
4.430 requests with url.path */xmlrpc.php
3.026 requests with url.path //xmlrpc.php
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-10-09 14:14:21
(4 days ago)
10 attempts against mh-misc-ban on ec102950
Web App Attack
๐ฉ๐ช
Nightreaver
2026-10-09 14:14:19
(4 days ago)
35.233.64.19 - - [09/Oct/2026:16:14:18 0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4 ...
show more
35.233.64.19 - - [09/Oct/2026:16:14:18 0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.233.64.19 - - [09/Oct/2026:16:14:18 0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.233.64.19 - - [09/Oct/2026:16:14:18 0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.233.64.19 - - [09/Oct/2026:16:14:18 0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.233.64.19 - - [09/Oct/2026:16:14:18 0200] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 490 "-" "Mozilla/5.0[...]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 14:12:40
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 35.233.64.19 (19.64.233.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 35.233.64.19 (19.64.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 10:12:36.763609 2026] [security2:error] [pid 15005:tid 15005] [client 35.233.64.19:56382] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||artfranz.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "artfranz.com"] [uri "/test/wp-json/wp/v2/users/"] [unique_id "asj2VPymboyDrfvtQKM9rgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2026-10-09 14:12:00
(4 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-09 14:08:22
(4 days ago)
35.233.64.19 - - [09/Oct/2026:14:07:48 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP ...
show more
35.233.64.19 - - [09/Oct/2026:14:07:48 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="35.233.64.19"
35.233.64.19 - - [09/Oct/2026:14:07:48 +0000] "GET //wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="35.233.64.19"
35.233.64.19 - - [09/Oct/2026:14:07:48 +0000] "GET //wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="35.233.64.19"
35.233.64.19 - - [09/Oct/2026:14:07:48 +0000] "GET //wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
...
show less
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-09 14:05:44
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฎ๐ฑ
Dolphi
2026-10-09 14:00:03
(4 days ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐ฉ๐ช
grassau.com
2026-10-09 13:52:57
(4 days ago)
(wordpress) Failed wordpress login from 35.233.64.19 (BE/Belgium/Brussels Capital/Brussels/19.64.233 ...
show more
(wordpress) Failed wordpress login from 35.233.64.19 (BE/Belgium/Brussels Capital/Brussels/19.64.233.35.bc.googleusercontent.com)
show less
Brute-Force
Anonymous
2026-10-09 13:52:17
(4 days ago)
Scanner hitting //wp-includes/ID3/license.txt on ara-oman.com (GOOGLE-CLOUD) โ aaguard
Brute-Force
Port Scan
๐ช๐ธ
robotstxt
2026-10-09 13:49:10
(4 days ago)
35.233.64.19 - - [09/Oct/2026:13:48:08 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP ...
show more
35.233.64.19 - - [09/Oct/2026:13:48:08 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="35.233.64.19"
35.233.64.19 - - [09/Oct/2026:13:48:08 +0000] "GET //wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="35.233.64.19"
35.233.64.19 - - [09/Oct/2026:13:48:08 +0000] "GET //wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="35.233.64.19"
35.233.64.19 - - [09/Oct/2026:13:48:10 +0000] "GET //wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/
...
show less
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-09 13:48:31
(4 days ago)
[09/Oct/2026:16:48:31 +0300] -- 35.233.64.19 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-i ...
show more
[09/Oct/2026:16:48:31 +0300] -- 35.233.64.19 Ban reason: Scanner [CMS_GENERIC] | Request: GET //wp-includes/ID3/license.txt HTTP/1.1
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-09 13:46:07
(4 days ago)
[ns19.kdns.gr] httpd-suspicious-path: sites=www.app.t-support.gr; logs=/var/log/httpd/domains/t-supp ...
show more
[ns19.kdns.gr] httpd-suspicious-path: sites=www.app.t-support.gr; logs=/var/log/httpd/domains/t-support.gr.app.log; samples=//wp-includes/ID3/license.txt | //blog/wp-includes/wlwmanifest.xml | //web/wp-includes/wlwmanifest.xml
show less
Hacking
Web App Attack
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-09 13:41:02
(4 days ago)
09/Oct/2026:13:40:59 +0000;35.233.64.19;"-"
09/Oct/2026:13:41:00 +0000;35.233.64.19;"/create-event/x ...
show more
09/Oct/2026:13:40:59 +0000;35.233.64.19;"-"
09/Oct/2026:13:41:00 +0000;35.233.64.19;"/create-event/xmlrpc.php?rsd"
09/Oct/2026:13:41:00 +0000;35.233.64.19;"/create-event/blog/wp-includes/wlwmanifest.xml"
09/Oct/2026:13:41:01 +0000;35.233.64.19;"/create-event/web/wp-includes/wlwmanifest.xml"
09/Oct/2026:13:41:01 +0000;35.233.64.19;"/create-event/wordpress/wp-includes/wlwmanifest.xml"
09/Oct/2026:13:41:01 +0000;35.233.64.19;"/create-event/wp/wp-includes/wlwmanifest.xml"
09/Oct/2026:13:41:02 +0000;35.233.64.19;"/create-event/2020/wp-includes/wlwmanifest.xml"
...
show less
Web Spam
Brute-Force
Web App Attack