|
🇸🇬
85.203.23.177
|
|
85.203.23.177 - - [08/Sep/2026:02:27:38 +0200] "GET /wp-includes/fonts/min.php HTTP/1.1" 404 355607 ...
show more
85.203.23.177 - - [08/Sep/2026:02:27:38 +0200] "GET /wp-includes/fonts/min.php HTTP/1.1" 404 355607 "-" "Go-http-client/1.1"
85.203.23.177 - - [08/Sep/2026:02:27:39 +0200] "GET /wp-includes/html-api/min.php HTTP/1.1" 404 355603 "-" "Go-http-client/1.1"
85.203.23.177 - - [08/Sep/2026:02:27:40 +0200] "GET /wp-includes/html-api/df.php HTTP/1.1" 404 355609 "-" "Go-http-client/1.1"
85.203.23.177 - - [08/Sep/2026:02:27:41 +0200] "GET /wp-includes/blocks/file/min.php HTTP/1.1" 404 355613 "-" "Go-http-client/1.1"
85.203.23.177 - - [08/Sep/2026:02:27:41 +0200] "GET /wp-includes/blocks/post-author/min.php HTTP/1.1" 404 355620 "-" "Go-http-client/1.1"
85.203.23.177 - - [08/Sep/2026:02:27:42 +0200] "GET /wp-includes/Requests/src/Response/min.php HTTP/1.1" 404 355623 "-" "Go-http-client/1.1"
85.203.23.177 - - [08/Sep/2026:02:27:43 +0200] "GET /wp-includes/ID3/min.php HTTP/1.1" 404 355605 "-" "Go-http-client/1.1"
85.203.23.177 - - [08/Sep/2026:02:27:43 +0200] "GET /wp-includes/js/tinymce/themes/load
...
show less
|
Web App Attack
|
|
🇸🇬
85.203.23.210
|
|
85.203.23.210 - - [08/Sep/2026:02:21:35 +0200] "GET /wp-includes/js/chosen.php HTTP/1.1" 404 355607 ...
show more
85.203.23.210 - - [08/Sep/2026:02:21:35 +0200] "GET /wp-includes/js/chosen.php HTTP/1.1" 404 355607 "-" "Go-http-client/1.1"
85.203.23.210 - - [08/Sep/2026:02:21:37 +0200] "GET /wp-includes/sitemaps/admin.php HTTP/1.1" 404 355612 "-" "Go-http-client/1.1"
85.203.23.210 - - [08/Sep/2026:02:21:51 +0200] "GET /wp-includes/js/tinymce/plugins/wp-load.php HTTP/1.1" 404 355624 "-" "Go-http-client/1.1"
85.203.23.210 - - [08/Sep/2026:02:21:52 +0200] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 355613 "-" "Go-http-client/1.1"
85.203.23.210 - - [08/Sep/2026:02:24:48 +0200] "GET /wp-includes/sodium_compat/namespaced/Core/pdwoxlzms.php HTTP/1.1" 404 355637 "-" "Go-http-client/1.1"
85.203.23.210 - - [08/Sep/2026:02:25:10 +0200] "GET /wp-includes/blocks/social-links/config.php HTTP/1.1" 404 355617 "-" "Go-http-client/1.1"
85.203.23.210 - - [08/Sep/2026:02:25:11 +0200] "GET /wp-includes/blocks/comment-date/config.php HTTP/1.1" 404 355617 "-" "Go-http-client/1.1"
85.203.23.210 - - [08/Sep/
...
show less
|
Web App Attack
|
|
🇸🇬
85.203.23.209
|
|
85.203.23.209 - - [08/Sep/2026:02:23:34 +0200] "GET /wp-includes/fonts/min.php HTTP/1.1" 404 355600 ...
show more
85.203.23.209 - - [08/Sep/2026:02:23:34 +0200] "GET /wp-includes/fonts/min.php HTTP/1.1" 404 355600 "-" "Go-http-client/1.1"
85.203.23.209 - - [08/Sep/2026:02:23:35 +0200] "GET /wp-includes/html-api/min.php HTTP/1.1" 404 355610 "-" "Go-http-client/1.1"
85.203.23.209 - - [08/Sep/2026:02:23:36 +0200] "GET /wp-includes/html-api/df.php HTTP/1.1" 404 355609 "-" "Go-http-client/1.1"
85.203.23.209 - - [08/Sep/2026:02:23:37 +0200] "GET /wp-includes/blocks/file/min.php HTTP/1.1" 404 355613 "-" "Go-http-client/1.1"
85.203.23.209 - - [08/Sep/2026:02:23:37 +0200] "GET /wp-includes/blocks/post-author/min.php HTTP/1.1" 404 355620 "-" "Go-http-client/1.1"
85.203.23.209 - - [08/Sep/2026:02:23:38 +0200] "GET /wp-includes/Requests/src/Response/min.php HTTP/1.1" 404 355623 "-" "Go-http-client/1.1"
85.203.23.209 - - [08/Sep/2026:02:23:39 +0200] "GET /wp-includes/ID3/min.php HTTP/1.1" 404 355598 "-" "Go-http-client/1.1"
85.203.23.209 - - [08/Sep/2026:02:23:40 +0200] "GET /wp-includes/js/tinymce/themes/load
...
show less
|
Web App Attack
|
|
🇸🇬
85.203.21.172
|
|
85.203.21.172 - - [07/Sep/2026:20:48:43 +0200] "GET /wp-includes/fonts/about.php HTTP/1.1" 404 35560 ...
show more
85.203.21.172 - - [07/Sep/2026:20:48:43 +0200] "GET /wp-includes/fonts/about.php HTTP/1.1" 404 355609 "-" "Go-http-client/1.1"
85.203.21.172 - - [07/Sep/2026:20:49:13 +0200] "GET /wp-includes/Requests/about.php HTTP/1.1" 404 355612 "-" "Go-http-client/1.1"
85.203.21.172 - - [07/Sep/2026:20:49:20 +0200] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 355612 "-" "Go-http-client/1.1"
85.203.21.172 - - [07/Sep/2026:20:49:40 +0200] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 404 355608 "-" "Go-http-client/1.1"
85.203.21.172 - - [07/Sep/2026:20:49:48 +0200] "GET /wp-includes/content.php HTTP/1.1" 404 355598 "-" "Go-http-client/1.1"
85.203.21.172 - - [07/Sep/2026:20:50:02 +0200] "GET /wp-includes/plugins.php HTTP/1.1" 404 355605 "-" "Go-http-client/1.1"
85.203.21.172 - - [07/Sep/2026:20:50:04 +0200] "GET /wp-includes/js/thickbox/thickbox.php HTTP/1.1" 404 355618 "-" "Go-http-client/1.1"
85.203.21.172 - - [07/Sep/2026:20:50:32 +0200] "GET /wp-includes/fonts/min.php HTTP/1.1" 404 35560
...
show less
|
Web App Attack
|
|
🇸🇬
85.203.21.164
|
|
85.203.21.164 - - [07/Sep/2026:20:50:38 +0200] "GET /wp-includes/blocks/post-author/min.php HTTP/1.1 ...
show more
85.203.21.164 - - [07/Sep/2026:20:50:38 +0200] "GET /wp-includes/blocks/post-author/min.php HTTP/1.1" 404 355651 "-" "Go-http-client/1.1"
85.203.21.164 - - [07/Sep/2026:20:50:39 +0200] "GET /wp-includes/Requests/src/Response/min.php HTTP/1.1" 404 355623 "-" "Go-http-client/1.1"
85.203.21.164 - - [07/Sep/2026:20:50:41 +0200] "GET /wp-includes/ID3/min.php HTTP/1.1" 404 355605 "-" "Go-http-client/1.1"
85.203.21.164 - - [07/Sep/2026:20:50:42 +0200] "GET /wp-includes/js/tinymce/themes/load.php HTTP/1.1" 404 355613 "-" "Go-http-client/1.1"
85.203.21.164 - - [07/Sep/2026:20:50:46 +0200] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 404 355614 "-" "Go-http-client/1.1"
85.203.21.164 - - [07/Sep/2026:20:50:48 +0200] "GET /wp-includes/js/tinymce/themes/plugin-install.php HTTP/1.1" 404 355623 "-" "Go-http-client/1.1"
85.203.21.164 - - [07/Sep/2026:20:50:49 +0200] "GET /wp-includes/js/tinymce/themes/wp-signup.php HTTP/1.1" 404 355618 "-" "Go-http-client/1.1"
85.203.21.164 - - [07/Sep/2026
...
show less
|
Web App Attack
|
|
🇺🇸
34.53.86.248
|
|
34.53.86.248 - - [07/Sep/2026:17:46:03 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5.0 ...
show more
34.53.86.248 - - [07/Sep/2026:17:46:03 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.53.86.248 - - [07/Sep/2026:17:46:04 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.53.86.248 - - [07/Sep/2026:17:46:05 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
34.21.28.66
|
|
34.21.28.66 - - [07/Sep/2026:11:39:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5.0 ( ...
show more
34.21.28.66 - - [07/Sep/2026:11:39:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.21.28.66 - - [07/Sep/2026:11:39:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.21.28.66 - - [07/Sep/2026:11:39:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4421 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇱🇹
62.60.130.198
|
|
62.60.130.198 - - [07/Sep/2026:11:00:55 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 34 ...
show more
62.60.130.198 - - [07/Sep/2026:11:00:55 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 347 "https://www.binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
62.60.130.198 - - [07/Sep/2026:11:01:04 +0200] "GET /wp-includes/cache.php HTTP/1.1" 500 347 "https://www.binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
62.60.130.198 - - [07/Sep/2026:11:01:14 +0200] "GET /wp-includes/class-feed.php HTTP/1.1" 500 373 "https://www.binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
62.60.130.198 - - [07/Sep/2026:11:01:15 +0200] "GET /wp-includes/class-http.php HTTP/1.1" 500 373 "https://www.binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
62.60.130.198 - - [07/Sep/2026:11:01:16 +0200] "G
...
show less
|
Web App Attack
|
|
🇺🇸
34.181.131.121
|
|
34.181.131.121 - - [07/Sep/2026:08:18:18 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5. ...
show more
34.181.131.121 - - [07/Sep/2026:08:18:18 +0200] "POST //xmlrpc.php HTTP/1.1" 200 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.181.131.121 - - [07/Sep/2026:08:18:18 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
34.181.131.121 - - [07/Sep/2026:08:18:19 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇩🇪
43.228.157.97
|
|
43.228.157.97 - - [07/Sep/2026:06:13:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 438 "-" "Mozilla/5.0 ...
show more
43.228.157.97 - - [07/Sep/2026:06:13:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 438 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
43.228.157.97 - - [07/Sep/2026:06:13:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
43.228.157.97 - - [07/Sep/2026:06:13:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
173.244.32.22
|
|
173.244.32.22 - - [06/Sep/2026:14:03:42 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 ...
show more
173.244.32.22 - - [06/Sep/2026:14:03:42 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"
173.244.32.22 - - [06/Sep/2026:14:03:45 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"
173.244.32.22 - - [06/Sep/2026:14:03:47 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇦
130.195.241.3
|
|
130.195.241.3 - - [06/Sep/2026:01:55:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 ...
show more
130.195.241.3 - - [06/Sep/2026:01:55:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
130.195.241.3 - - [06/Sep/2026:01:55:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
130.195.241.3 - - [06/Sep/2026:01:55:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇮🇩
38.253.224.23
|
|
38.253.224.23 - - [05/Sep/2026:12:37:33 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 ...
show more
38.253.224.23 - - [05/Sep/2026:12:37:33 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
38.253.224.23 - - [05/Sep/2026:12:37:57 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
38.253.224.23 - - [05/Sep/2026:12:38:03 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
192.0.88.75
|
|
192.0.88.75 - - [05/Sep/2026:01:26:46 +0200] "POST /xmlrpc.php?for=jetpack&token=P%24ZirfgM43bFexru3 ...
show more
192.0.88.75 - - [05/Sep/2026:01:26:46 +0200] "POST /xmlrpc.php?for=jetpack&token=P%24ZirfgM43bFexru38tn%28%2AIEI%25%23ZW%29l7%3A1%3A0×tamp=1788564406&nonce=GBqTGFQ1Uf&body-hash=pdst%2B%2B8gjpsEsdzTGdS19%2BYN3g4%3D&signature=7QTaxBoaMaWOkbSQ6u%2FBRCCSLPc%3D HTTP/1.1" 200 4618 "https://erp-management.de/xmlrpc.php?for=jetpack&token=P%24ZirfgM43bFexru38tn%28%2AIEI%25%23ZW%29l7%3A1%3A0×tamp=1788564406&nonce=GBqTGFQ1Uf&body-hash=pdst%2B%2B8gjpsEsdzTGdS19%2BYN3g4%3D&signature=7QTaxBoaMaWOkbSQ6u%2FBRCCSLPc%3D" "Jetpack by WordPress.com"
192.0.88.75 - - [05/Sep/2026:01:26:47 +0200] "POST /xmlrpc.php?for=jetpack HTTP/1.1" 200 4717 "https://erp-management.de/xmlrpc.php?for=jetpack" "WordPress.com; https://erp-management.de"
192.0.88.75 - - [05/Sep/2026:01:26:49 +0200] "POST /xmlrpc.php?for=jetpack&token=P%24ZirfgM43bFexru38tn%28%2AIEI%25%23ZW%29l7%3A1%3A0×tamp=1788564408&nonce=pFFKloKH6Z&body-hash=Sfax5hhECwToSG3CH43fTQl6FT4%3D&signature=6JA0o6FrY%2Bm7GYnj0ggNSqNbJWE%3D HTTP/1.1"
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
13.140.165.212
|
|
13.140.165.212 - - [04/Sep/2026:20:05:12 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 3 ...
show more
13.140.165.212 - - [04/Sep/2026:20:05:12 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.140.165.212 - - [04/Sep/2026:20:05:17 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.140.165.212 - - [04/Sep/2026:20:05:18 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.140.165.212 - - [04/Sep/2026:20:05:18 +0200] "GET /wp-includes/block-patterns.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
13.140.165.212 - - [04/Sep/2026:20:05:18 +0200] "GET /wp-includes/cache.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (Wind
...
show less
|
Web App Attack
|
|
🇮🇩
38.253.224.23
|
|
38.253.224.23 - - [04/Sep/2026:16:29:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 ...
show more
38.253.224.23 - - [04/Sep/2026:16:29:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
38.253.224.23 - - [04/Sep/2026:16:29:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
38.253.224.23 - - [04/Sep/2026:16:29:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
143.244.57.82
|
|
143.244.57.82 - - [04/Sep/2026:14:08:29 +0200] "GET /wp-includes/IXR/class-IXR-clientmulticall.php H ...
show more
143.244.57.82 - - [04/Sep/2026:14:08:29 +0200] "GET /wp-includes/IXR/class-IXR-clientmulticall.php HTTP/1.1" 500 271 "-" "-"
143.244.57.82 - - [04/Sep/2026:14:08:29 +0200] "GET /wp-includes/IXR/class-IXR-introspectionserver.php HTTP/1.1" 500 271 "-" "-"
143.244.57.82 - - [04/Sep/2026:14:08:30 +0200] "GET /wp-includes/PHPMailer/OAuth.php HTTP/1.1" 500 271 "-" "-"
143.244.57.82 - - [04/Sep/2026:14:08:33 +0200] "GET /wp-includes/Requests/library/Requests.php HTTP/1.1" 500 271 "-" "-"
143.244.57.82 - - [04/Sep/2026:14:08:35 +0200] "GET /wp-includes/Requests/src/Auth/Basic.php HTTP/1.1" 500 271 "-" "-"
143.244.57.82 - - [04/Sep/2026:14:08:37 +0200] "GET /wp-includes/Requests/src/Exception/ArgumentCount.php HTTP/1.1" 500 271 "-" "-"
143.244.57.82 - - [04/Sep/2026:14:08:37 +0200] "GET /wp-includes/Requests/src/Exception/Http.php HTTP/1.1" 500 438 "-" "-"
143.244.57.82 - - [04/Sep/2026:14:08:38 +0200] "GET /wp-includes/Requests/src/Exception/Http/Status304.php HTTP/1.1" 500 271 "-" "-"
143.244
...
show less
|
Web App Attack
|
|
🇮🇩
103.59.160.245
|
|
103.59.160.245 - - [04/Sep/2026:08:42:03 +0200] "GET /wp-includes/class-wp-text-diff-renderer-inline ...
show more
103.59.160.245 - - [04/Sep/2026:08:42:03 +0200] "GET /wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.245 - - [04/Sep/2026:08:42:04 +0200] "GET /wp-includes/feed-rss2-comments.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.245 - - [04/Sep/2026:08:42:05 +0200] "GET /wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.245 - - [04/Sep/2026:08:42:09 +0200] "GET /wp-includes/class-wp-scripts.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.245 - - [04/Sep/2026:08:42:10 +0200] "GET /wp-includes/class-smtp.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.245 - - [04/Sep/2026:08:42:11 +0200] "GET /wp-includes/class-walker-category-dropdown.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.245 - -
...
show less
|
Web App Attack
|
|
🇸🇬
168.144.33.239
|
|
168.144.33.239 - - [04/Sep/2026:06:18:11 +0200] "GET /wp-includes/locale.php HTTP/1.1" 500 347 "-" " ...
show more
168.144.33.239 - - [04/Sep/2026:06:18:11 +0200] "GET /wp-includes/locale.php HTTP/1.1" 500 347 "-" "WP-Safe-Scanner/2.0"
168.144.33.239 - - [04/Sep/2026:06:18:12 +0200] "GET /wp-includes/cache.php HTTP/1.1" 500 347 "-" "WP-Safe-Scanner/2.0"
168.144.33.239 - - [04/Sep/2026:06:18:12 +0200] "GET /wp-includes/class-wp-text-diff-renderer-inline.php HTTP/1.1" 500 347 "-" "WP-Safe-Scanner/2.0"
168.144.33.239 - - [04/Sep/2026:06:18:13 +0200] "GET /wp-includes/class-wp-simplepie-file.php HTTP/1.1" 500 347 "-" "WP-Safe-Scanner/2.0"
168.144.33.239 - - [04/Sep/2026:06:18:14 +0200] "GET /wp-includes/connectors.php HTTP/1.1" 500 347 "-" "WP-Safe-Scanner/2.0"
168.144.33.239 - - [04/Sep/2026:06:18:14 +0200] "GET /wp-includes/feed-rss.php HTTP/1.1" 500 373 "-" "WP-Safe-Scanner/2.0"
168.144.33.239 - - [04/Sep/2026:06:18:15 +0200] "GET /wp-includes/class-snoopy.php HTTP/1.1" 500 347 "-" "WP-Safe-Scanner/2.0"
168.144.33.239 - - [04/Sep/2026:06:18:16 +0200] "GET /wp-includes/class-walker-comment.php HTTP/1
...
show less
|
Web App Attack
|
|
🇺🇸
192.241.143.75
|
|
192.241.143.75 - - [04/Sep/2026:03:05:16 +0200] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 404 ...
show more
192.241.143.75 - - [04/Sep/2026:03:05:16 +0200] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 404 362657 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
192.241.143.75 - - [04/Sep/2026:03:05:24 +0200] "GET /wp-includes/blocks/chosen.php HTTP/1.1" 404 362655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
192.241.143.75 - - [04/Sep/2026:03:05:38 +0200] "GET /wp-includes/widgets/parx.php HTTP/1.1" 404 362649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
192.241.143.75 - - [04/Sep/2026:03:06:21 +0200] "GET /wp-includes/certificates/muse.php HTTP/1.1" 404 358658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36"
192.241.143.75 - - [04/Sep/2026:03:06:45 +0200] "GET /wp-includes/block-patterns/wp-con
...
show less
|
Web App Attack
|
|
🇷🇴
130.195.241.3
|
|
130.195.241.3 - - [04/Sep/2026:01:22:29 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 ...
show more
130.195.241.3 - - [04/Sep/2026:01:22:29 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
130.195.241.3 - - [04/Sep/2026:01:23:04 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
130.195.241.3 - - [04/Sep/2026:01:30:54 +0200] "POST //xmlrpc.php HTTP/1.1" 200 723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇱🇺
64.89.160.5
|
|
64.89.160.5 - - [04/Sep/2026:01:30:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4418 "-" "Mozilla/5.0 ( ...
show more
64.89.160.5 - - [04/Sep/2026:01:30:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15"
64.89.160.5 - - [04/Sep/2026:01:30:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
64.89.160.5 - - [04/Sep/2026:01:30:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4417 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36"
...
show less
|
Brute-Force
Web App Attack
|
|
🇮🇩
103.59.160.220
|
|
103.59.160.220 - - [04/Sep/2026:01:15:13 +0200] "GET /wp-includes/class-wp-scripts.php HTTP/1.1" 500 ...
show more
103.59.160.220 - - [04/Sep/2026:01:15:13 +0200] "GET /wp-includes/class-wp-scripts.php HTTP/1.1" 500 442 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.220 - - [04/Sep/2026:01:15:13 +0200] "GET /wp-includes/class-walker-page.php HTTP/1.1" 500 4447 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.220 - - [04/Sep/2026:01:15:14 +0200] "GET /wp-includes/feed-rss.php HTTP/1.1" 500 442 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.220 - - [04/Sep/2026:01:15:14 +0200] "GET /wp-includes/spl-autoload-compat.php HTTP/1.1" 500 4447 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.220 - - [04/Sep/2026:01:15:16 +0200] "GET /wp-includes/class-wp-http-requests-hooks.php HTTP/1.1" 500 442 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.220 - - [04/Sep/2026:01:15:16 +0200] "GET /wp-includes/class-wp-styles.php HTTP/1.1" 500 4446 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.160.220 - - [04/Sep/2026:01:15:18 +0200]
...
show less
|
Web App Attack
|
|
🇮🇩
103.59.161.148
|
|
103.59.161.148 - - [03/Sep/2026:16:50:30 +0200] "GET /wp-includes/build/pages/options-connectors/pag ...
show more
103.59.161.148 - - [03/Sep/2026:16:50:30 +0200] "GET /wp-includes/build/pages/options-connectors/page-wp-admin.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:50:30 +0200] "GET /wp-includes/build/pages/font-library/page.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:50:30 +0200] "GET /wp-includes/build/pages/font-library/page.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:50:30 +0200] "GET /wp-includes/build/pages/options-connectors/page-wp-admin.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:50:30 +0200] "GET /wp-includes/build/pages/options-connectors/page.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:50:31 +0200] "GET /wp-includes/build/pages/options-connectors/page.php HTTP/1.1
...
show less
|
Web App Attack
|
|
🇮🇩
103.59.161.148
|
|
103.59.161.148 - - [03/Sep/2026:16:45:26 +0200] "GET /wp-includes/class-wp-feed-cache.php HTTP/1.1" ...
show more
103.59.161.148 - - [03/Sep/2026:16:45:26 +0200] "GET /wp-includes/class-wp-feed-cache.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:45:26 +0200] "GET /wp-includes/class-wp-feed-cache.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:45:27 +0200] "GET /wp-includes/feed-rss.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:45:27 +0200] "GET /wp-includes/class-wp-feed-cache.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:45:27 +0200] "GET /wp-includes/feed-rss.php HTTP/1.1" 500 373 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:45:27 +0200] "GET /wp-includes/class-wp-feed-cache.php HTTP/1.1" 500 347 "-" "Mozilla/5.0 (compatible; WP-Safe-Scanner/1.0)"
103.59.161.148 - - [03/Sep/2026:16:45:27 +0200] "GET /wp-inclu
...
show less
|
Web App Attack
|