๐ฉ๐ช
webanyone
2026-09-14 12:47:10
(1 week ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ฎ๐น
VHosting
2026-09-14 12:45:08
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ง๐ท
vfAcceloReporter
2026-09-14 12:41:22
(1 week ago)
35.237.87.90 - - [14/Sep/2026:09:41:19 -0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 500 579 " ...
show more
35.237.87.90 - - [14/Sep/2026:09:41:19 -0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:09:41:19 -0300] "GET //feed/ HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:09:41:20 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:09:41:21 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:09:41:21 -0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 500 579 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
...
show less
Brute-Force
Web App Attack
Exploited Host
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-14 12:41:15
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฎ๐ฑ
Dolphi
2026-09-14 12:40:03
(1 week ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
Anonymous
2026-09-14 12:36:27
(1 week ago)
Web scanner: GET //wp-includes/ID3/license.txt
Web App Attack
Hacking
๐ณ๐ด
jad-abuse
2026-09-14 12:35:28
(1 week ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 17 hits.
show less
Brute-Force
Web App Attack
๐บ๐ธ
kosada.com
2026-09-14 12:34:41
(1 week ago)
Repeated requests for suspicious nonexistent URLs, for example: //wordpress/wp-includes/wlwmanifest. ...
show more
Repeated requests for suspicious nonexistent URLs, for example: //wordpress/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
Web App Attack
๐ฌ๐ง
abivia
2026-09-14 12:34:37
(1 week ago)
Abivia WAF trigger: Rule not-wp: WP probing on non-WP site uri: //wp-includes/ID3/license.txt
Hacking
Web App Attack
๐บ๐ธ
abenage
2026-09-14 12:29:13
(1 week ago)
35.237.87.90 - - [14/Sep/2026:06:29:12 -0600] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 564 " ...
show more
35.237.87.90 - - [14/Sep/2026:06:29:12 -0600] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-14 12:27:38
(1 week ago)
[redacted] 35.237.87.90 - - [14/Sep/2026:14:27:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 35.237.87.90 - - [14/Sep/2026:14:27:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.237.87.90 - - [14/Sep/2026:14:27:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.237.87.90 - - [14/Sep/2026:14:27:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.237.87.90 - - [14/Sep/2026:14:27:36 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.237.87.90 - - [14/Sep/2026:14:27:36 +0200] "POST //xmlrpc.php HTTP/
...
show less
Hacking
Web App Attack
๐บ๐ธ
lavnet.net
2026-09-14 12:17:58
(1 week ago)
35.237.87.90 - - [14/Sep/2026:12:17:57 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 2083 " ...
show more
35.237.87.90 - - [14/Sep/2026:12:17:57 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:12:17:57 +0000] "GET /feed/ HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:12:17:57 +0000] "GET /xmlrpc.php?rsd HTTP/1.1" 403 2086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:12:17:57 +0000] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.237.87.90 - - [14/Sep/2026:12:17:57 +0000] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
...
show less
Brute-Force
Anonymous
2025-10-16 09:35:34
(11 months ago)
wordpress-trap
Web App Attack