Anonymous
2026-09-26 22:17:59
(2 minutes ago)
(caddyscan) Scanner path probe from 38.253.224.47 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ...
show more
(caddyscan) Scanner path probe from 38.253.224.47 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:22:17:50 +0000] "GET /wp-admin/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:22:17:52 +0000] "GET /wp-admin/css/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:22:17:54 +0000] "GET /wp-admin/images/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:22:17:56 +0000] "GET /wp-admin/includes/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:22:17:58 +0000] "GET /wp-admin/js/ HTTP/1.1"
show less
Port Scan
๐ฉ๐ช
FeG Deutschland
2026-09-26 20:48:04
(1 hour ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
Anonymous
2026-09-26 18:14:56
(4 hours ago)
(caddyscan) Scanner path probe from 38.253.224.47 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ...
show more
(caddyscan) Scanner path probe from 38.253.224.47 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:18:14:43 +0000] "GET /wp-admin/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:18:14:48 +0000] "GET /wp-admin/css/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:18:14:50 +0000] "GET /wp-admin/images/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:18:14:51 +0000] "GET /wp-admin/includes/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:18:14:54 +0000] "GET /wp-admin/js/ HTTP/1.1"
show less
Port Scan
๐ณ๐ฑ
Alt255
2026-09-26 18:14:26
(4 hours ago)
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 38.253.224.47 - - [26/Sep/2026:20:13:49 +0200] "GET /wp-admin/ HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:20:13:50 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:20:13:52 +0200] "GET /wp-admin/images/ HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:20:13:53 +0200] "GET /wp-admin/includes/ HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:20:13:54 +0200] "GET /wp-admin/js/ HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanne
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-26 18:10:02
(4 hours ago)
| [Dangerous/Indonesia] Aggressive IP 38.253.224.47 (~30 hits). Type: DoS Defender- Web server 400 e ...
show more
| [Dangerous/Indonesia] Aggressive IP 38.253.224.47 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
๐ฉ๐ช
ghostwarriors
2026-09-26 17:20:12
(5 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-26 17:10:07
(5 hours ago)
38.253.224.47 - - [26/Sep/2026:19:09:51 +0200] "GET / HTTP/1.1" 301 575 "-" "Mozilla/5.0 (compatible ...
show more
38.253.224.47 - - [26/Sep/2026:19:09:51 +0200] "GET / HTTP/1.1" 301 575 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:19:09:53 +0200] "GET / HTTP/1.1" 200 16953 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:19:09:56 +0200] "GET /wp-admin/ HTTP/1.1" 301 592 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:19:09:56 +0200] "GET /wp-admin/ HTTP/1.1" 302 792 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:19:09:58 +0200] "GET /wp-admin/upgrade.php?_wp_http_referer=%2Fwp-admin%2F HTTP/1.1" 200 1338 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:19:09:58 +0200] "GET /wp-admin/css/ HTTP/1.1" 301 600 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:19:09:59 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 518 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:19
show less
Web App Attack
Hacking
๐ง๐ช
cmbplf
2026-09-26 16:10:00
(6 hours ago)
9.022 4xx requests in 1 hour (2w2d23h)
Brute-Force
Bad Web Bot
Anonymous
2026-09-26 15:39:02
(6 hours ago)
Bot / scanning and/or hacking attempts: GET /wp-admin/ HTTP/1.1, GET /wp-login.php?redirect_to=https ...
show more
Bot / scanning and/or hacking attempts: GET /wp-admin/ HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fbcsnieuwkoop.nl%2Fw, GET / HTTP/1.1
show less
Hacking
Web App Attack
๐ช๐ธ
pipeline.es
2026-09-26 15:30:47
(6 hours ago)
Web scanning / probing for vulnerable paths | URL: /wp-admin/network/ | Evidence: www.viajesaguamari ...
show more
Web scanning / probing for vulnerable paths | URL: /wp-admin/network/ | Evidence: www.viajesaguamarina.es 38.253.224.47 - - [26/Sep/2026:17:28:30 +0200] \"GET /wp-admin/network/ HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)\" GEOIP_COUNTRY_CODE=ID | ASN: PT Trisari Data Indonusa | Country: US
show less
Port Scan
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-26 15:30:02
(6 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฉ๐ช
Manuel Braeuer
2026-09-26 15:13:36
(7 hours ago)
38.253.224.47 - - [26/Sep/2026:17:13:31 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6282 "-" "Mozilla/5 ...
show more
38.253.224.47 - - [26/Sep/2026:17:13:31 +0200] "GET /wp-admin/css/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:17:13:32 +0200] "GET /wp-admin/images/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:17:13:33 +0200] "GET /wp-admin/includes/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:17:13:33 +0200] "GET /wp-admin/js/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:17:13:35 +0200] "GET /wp-admin/maint/ HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
...
show less
Web App Attack
Anonymous
2026-09-26 02:29:27
(19 hours ago)
(caddyscan) Scanner path probe from 38.253.224.47 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: ...
show more
(caddyscan) Scanner path probe from 38.253.224.47 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:02:28:37 +0000] "GET /wp-admin/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:02:28:44 +0000] "GET /wp-admin/css/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:02:29:05 +0000] "GET /wp-admin/images/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:02:29:13 +0000] "GET /wp-admin/includes/ HTTP/1.1"
[REDACTED] 200 2627 38.253.224.47 - - [26/Sep/2026:02:29:22 +0000] "GET /wp-admin/js/ HTTP/1.1"
show less
Port Scan
๐ฆ๐บ
aranguren.org
2026-09-26 00:43:54
(21 hours ago)
38.253.224.47 - - [26/Sep/2026:10:43:03 +1000] "GET /Health/ HTTP/1.1" 200 452 "-" "Mozilla/5.0 (com ...
show more
38.253.224.47 - - [26/Sep/2026:10:43:03 +1000] "GET /Health/ HTTP/1.1" 200 452 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:10:43:33 +1000] "GET /wp-admin/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:10:43:38 +1000] "GET /wp-admin/css/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:10:43:43 +1000] "GET /wp-admin/images/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:10:43:48 +1000] "GET /wp-admin/includes/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
38.253.224.47 - - [26/Sep/2026:10:43:53 +1000] "GET /wp-admin/js/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
...
show less
Bad Web Bot
๐ฌ๐ง
consul.to
2026-09-26 00:05:55
(22 hours ago)
Web attack/malicious scanning detected
Web App Attack