๐ฉ๐ช
mondor.ro
2026-08-28 14:42:05
(4 days ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.245.73.195, Reason: ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.245.73.195, Reason:[(manifest) WordPress wlwmanifest.xml Attack 35.245.73.195 (US/United States/195.73.245.35.bc.googleusercontent.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
๐ง๐พ
lns.bz
2026-08-28 14:41:15
(4 days ago)
Too many 404 requests [BY]
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-08-28 14:38:07
(4 days ago)
Try to access /xmlrpc.php?rsd
Web App Attack
Anonymous
2026-08-28 14:34:04
(4 days ago)
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //?author=2 HTTP/1.1, GET // ...
show more
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1, GET //?author=2 HTTP/1.1, GET //wp-includes/ID3/license.txt HTTP/1.1
show less
Hacking
Web App Attack
๐บ๐ธ
LotPhantom
2026-08-28 14:32:10
(4 days ago)
35.245.73.195 - - [28/Aug/2026:14:31:10 +0000] "" 400 0 "-" "-" "0"
35.245.73.195 - - [28/Aug/2026:1 ...
show more
35.245.73.195 - - [28/Aug/2026:14:31:10 +0000] "" 400 0 "-" "-" "0"
35.245.73.195 - - [28/Aug/2026:14:31:10 +0000] "" 400 0 "-" "-" "0"
...
show less
Hacking
Web App Attack
Anonymous
2026-08-28 14:30:54
(4 days ago)
[redacted] 35.245.73.195 - - [28/Aug/2026:16:30:49 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 35.245.73.195 - - [28/Aug/2026:16:30:49 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:30:49 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:30:50 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:30:50 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:30:51 +0200] "POST //x
...
show less
Hacking
Web App Attack
๐ฎ๐น
VHosting
2026-08-28 14:30:04
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-08-28 14:29:45
(4 days ago)
35.245.73.195 - - [28/Aug/2026:16:29:37 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
35.245.73.195 - - [28/Aug/2026:16:29:37 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.245.73.195 - - [28/Aug/2026:16:29:37 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.245.73.195 - - [28/Aug/2026:16:29:37 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.245.73.195 - - [28/Aug/2026:16:29:37 +0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.245.73.195 - - [28/Aug/2026:16:29:37 +0200] "GET /2020/wp-includes/wlwmanifest.xml HTTP/1.1" 40
show less
Web App Attack
Hacking
๐ฉ๐ช
LRob
2026-08-28 14:17:52
(4 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: //xmlrpc.php | 2026-08-28 14:17 UTC
show less
Hacking
Web App Attack
๐บ๐ธ
Copious7283
2026-08-28 14:15:39
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฉ๐ช
Viveronese
2026-08-28 14:14:54
(4 days ago)
HTTP vulnerability scanning
Web App Attack
Anonymous
2026-08-28 14:10:50
(4 days ago)
[redacted] 35.245.73.195 - - [28/Aug/2026:16:10:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "M ...
show more
[redacted] 35.245.73.195 - - [28/Aug/2026:16:10:46 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:10:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:10:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:10:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 35.245.73.195 - - [28/Aug/2026:16:10:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla
...
show less
Hacking
Web App Attack
๐จ๐ญ
zynex
2026-08-28 14:09:49
(4 days ago)
URL Probing: /wp-includes/id3/license.txt/wp/wp-includes/wlwmanifest.xml
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-17 22:04:48
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-16.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
wlt-blocker
2026-06-16 07:18:19
(2 months ago)
Unauthorized access to webpage admin
Web App Attack