Anonymous
2026-06-18 20:52:43
(1 month ago)
"GET /wp-includes/ID3/license.txt HTTP/1.1"
Hacking
Web App Attack
๐ฎ๐น
NonOggiCaroMio
2026-06-18 14:17:26
(1 month ago)
Arruso ca si: crowdsecurity/http-probing
Brute-Force
๐ฉ๐ช
FeG Deutschland
2026-06-18 14:15:34
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
๐บ๐ธ
PlexLads
2026-06-18 14:05:56
(1 month ago)
35.253.19.132 - - [18/Jun/2026:07:05:55 -0700] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 5221 ...
show more
35.253.19.132 - - [18/Jun/2026:07:05:55 -0700] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 5221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.253.19.132 - - [18/Jun/2026:07:05:55 -0700] "GET //feed/ HTTP/1.1" 403 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.253.19.132 - - [18/Jun/2026:07:05:55 -0700] "GET //xmlrpc.php?rsd HTTP/1.1" 400 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.253.19.132 - - [18/Jun/2026:07:05:55 -0700] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 5221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 35.253.19.132 - - [18/Jun/2026:07:05:55 -0700] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
...
show less
Hacking
Web App Attack
๐ฉ๐ช
LRob
2026-06-18 14:00:16
(1 month ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
Anonymous
2026-06-18 14:00:13
(1 month ago)
Scanning/Probing activity detected.
Bad Web Bot
Web App Attack
๐ฌ๐ง
OptimusGO
2026-06-18 13:58:17
(1 month ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-06-18 14:58:17 UTC
Log evidence:
35.253.19.132 - - [18/Jun/2026:14:57:51 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:14:57:51 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:14:57:51 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Port Scan
Brute-Force
๐ฉ๐ช
mr.joecat
2026-06-18 13:49:39
(1 month ago)
35.253.19.132 - - [18/Jun/2026:15:49:37 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 4170 ...
show more
35.253.19.132 - - [18/Jun/2026:15:49:37 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 4170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:15:49:37 +0200] "GET //feed/ HTTP/1.1" 404 4176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:15:49:37 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 4187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:15:49:38 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:15:49:38 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 4170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
Web App Attack
๐ฌ๐ง
Oakley
2026-06-18 13:45:48
(1 month ago)
(mod_security) mod_security (id:900191) triggered by 35.253.19.132 (US/United States/132.19.253.35.b ...
show more
(mod_security) mod_security (id:900191) triggered by 35.253.19.132 (US/United States/132.19.253.35.bc.googleusercontent.com): 5 in the last 900 secs
show less
Web App Attack
Hacking
๐ท๐บ
loveprod
2026-06-18 13:44:12
(1 month ago)
35.253.19.132 - - [18/Jun/2026:16:44:11 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 301 ...
show more
35.253.19.132 - - [18/Jun/2026:16:44:11 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 301 714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:16:44:11 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 301 713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2026-06-18 13:43:42
(1 month ago)
35.253.19.132 - - [18/Jun/2026:16:43:38 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 683 " ...
show more
35.253.19.132 - - [18/Jun/2026:16:43:38 +0300] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
35.253.19.132 - - [18/Jun/2026:16:43:40 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
๐ท๐บ
Mga Admin
2026-06-18 13:42:50
(1 month ago)
35.253.19.132 - - [18/Jun/2026:20:42:48 +0700] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 69 "- ...
show more
35.253.19.132 - - [18/Jun/2026:20:42:48 +0700] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 69 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-06-18 13:40:04
(1 month ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-18 13:39:19
(1 month ago)
10 attempts against mh_ha-misc-ban on pf102929
Brute-Force
Web App Attack
๐บ๐ธ
kosada.com
2026-06-18 13:35:57
(1 month ago)
Web exploit attempt: <methodCall><methodName>system.multicall</methodName><params><param><value><arr ...
show more
Web exploit attempt: <methodCall><methodName>system.multicall</methodName><params><param><value><array><data>x0dx0a<value><struct><member><name>methodName</name><value><string>wp.getUsersBlogs</string></value></member><member><name>params</name><value><array><data><value><array><data><value><string>admin</string></value><value><string>admin</string></value></data></array></value></data></array></value></member></struct></value>x0dx0a</data></array></value></param></params></methodCall>
show less
Web App Attack