🇳🇿
Antinson
2026-08-27 10:52:37
(2 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
mnsf
2026-08-27 10:05:35
(2 days ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
Anonymous
2026-08-27 10:03:56
(2 days ago)
35.253.145.137 - - [27/Aug/2026:12:03:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 ...
show more
35.253.145.137 - - [27/Aug/2026:12:03:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:12:03:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:12:03:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:12:03:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:12:03:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.
...
show less
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-27 10:01:01
(2 days ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/137.145.253.35.bc.googleusercontent.com
Web App Attack
🇺🇸
infra-monitor
2026-08-27 10:00:08
(2 days ago)
Automated ban via infra-monitor: wp-sensitive-paths
Web App Attack
🇫🇷
dynamix
2026-08-27 09:58:18
(2 days ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇬🇧
Mendip_Defender
2026-08-27 09:56:51
(2 days ago)
35.253.145.137 - - [27/Aug/2026:10:57:00 +0100] "GET //wp-includes/id3/license.txt/feed/ HTTP/1.1" 4 ...
show more
35.253.145.137 - - [27/Aug/2026:10:57:00 +0100] "GET //wp-includes/id3/license.txt/feed/ HTTP/1.1" 404 6446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:10:57:00 +0100] "GET //wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:10:57:00 +0100] "GET //wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6446 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Web App Attack
Anonymous
2026-08-27 09:54:33
(2 days ago)
wordpress exploit scan
Web App Attack
Anonymous
2026-08-27 09:45:29
(3 days ago)
35.253.145.137 - - [27/Aug/2026:06:45:27 -0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 ...
show more
35.253.145.137 - - [27/Aug/2026:06:45:27 -0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:06:45:28 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:06:45:28 -0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:06:45:28 -0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.145.137 - - [27/Aug/2026:06:45:28 -0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mo
...
show less
Port Scan
🇩🇪
Kreapptivo
2026-08-27 09:42:14
(3 days ago)
[27/Aug/2026:11:42:11 +0200] Web-Request: "GET //wp-includes/ID3/license.txt", User-Agent: "Mozilla/ ...
show more
[27/Aug/2026:11:42:11 +0200] Web-Request: "GET //wp-includes/ID3/license.txt", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-08-27 09:41:42
(3 days ago)
[redacted] 35.253.145.137 - - [27/Aug/2026:10:41:39 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1. ...
show more
[redacted] 35.253.145.137 - - [27/Aug/2026:10:41:39 +0100] "GET //wp-includes/ID3/[redacted] HTTP/1.1" 302 6768 0/125132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 35.253.145.137 - - [27/Aug/2026:10:41:39 +0100] "GET /[redacted]?rsd HTTP/1.1" 302 1549 0/113367 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-27 09:41:19
(3 days ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: //wp-json/wp/v2/users/ | 2026-08-27 09:41 UTC
show less
Hacking
Web App Attack
🇮🇹
🐷🐷🐷
2026-08-27 09:41:09
(3 days ago)
Multiple WordPress unauthorized access attempts
...
Brute-Force
Bad Web Bot
🇮🇹
VHosting
2026-08-27 09:40:04
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇹
ciccio diddo
2026-08-27 09:37:02
(3 days ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack