Anonymous
2026-10-24 13:58:03
(23 hours ago)
fail2ban jail apache-scanner: 82.102.18.126 - - [17/Sep/2026:16:00:16 -0700] "GET /news/wp-includes/ ...
show more
fail2ban jail apache-scanner: 82.102.18.126 - - [17/Sep/2026:16:00:16 -0700] "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1" 403 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 82.102.18.126 - - [17/Sep/2026:16:00:16 -0700] "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1" 403 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 82.102.18.126 - - [17/Sep/2026:16:00:17 -0700] "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1" 403 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 82.102.18.126 - - [17/Sep/2026:16:00:17 -0700] "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1" 403 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.
show less
Web App Attack
Port Scan
Anonymous
2026-10-24 03:46:31
(1 day ago)
Bad Web Bot
๐ซ๐ท
SpaceHost-Server
2026-10-23 22:31:09
(1 day ago)
Brute-Force
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-10-23 04:16:53
(2 days ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-22 22:28:16
(2 days ago)
Brute-Force
Web App Attack
Anonymous
2026-10-22 21:56:02
(2 days ago)
Fail2ban filtered
...
Web App Attack
๐บ๐ธ
ruusvuu
2026-10-22 21:46:55
(2 days ago)
Automated abuse report: 15 attack/probe requests from M247 Europe SRL / FR.
Targeted paths: //xmlrpc ...
show more
Automated abuse report: 15 attack/probe requests from M247 Europe SRL / FR.
Targeted paths: //xmlrpc.php, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml, //website/wp-includes/wlwmanifest.xml, //wp/wp-includes/wlwmanifest.xml.
Sample log lines:
[mir-org] [10/22/2026, 2:46:53 PM] GET .mirregistry.org//wp2/wp-includes/wlwmanifest.xml 404 82.102.18.126 - 3.719 ms
[mir-org] [10/22/2026, 2:46:54 PM] GET .mirregistry.org//site/wp-includes/wlwmanifest.xml 404 82.102.18.126 - 3.209 ms
[mir-org] [10/22/2026, 2:46:55 PM] GET .mirregistry.org//cms/wp-includes/wlwmanifest.xml 404 82.102.18.126 - 3.448 ms
Detected by an automated web-server log monitor.
show less
Web App Attack
๐ฉ๐ช
raph
2026-10-22 21:39:07
(2 days ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
๐จ๐ญ
Ribeye375
2026-10-22 21:00:16
(2 days ago)
HIPS rce-attempt - Block tcp/0:65535
Hacking
Web App Attack
Anonymous
2026-10-22 20:57:14
(2 days ago)
Blocked by ModSec and CSF
Port Scan
๐ฉ๐ช
dbmwebdesign
2026-10-22 20:45:06
(2 days ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
๐ซ๐ฎ
as211431.net
2026-10-22 20:27:10
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from FR.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: //cms/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
kosada.com
2026-10-22 20:25:31
(2 days ago)
Repeated requests for suspicious nonexistent URLs, for example: //website/wp-includes/wlwmanifest.xm ...
show more
Repeated requests for suspicious nonexistent URLs, for example: //website/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36")
show less
Web App Attack
๐ฉ๐ช
ramazan
2026-10-22 20:06:44
(2 days ago)
Fail2Ban: nginx-4xx | Failures: 10 | Log: /2018/wp-includes/wlwmanifest.xml /2019/wp-includes/wlwman ...
show more
Fail2Ban: nginx-4xx | Failures: 10 | Log: /2018/wp-includes/wlwmanifest.xml /2019/wp-includes/wlwmanifest.xml /blog/wp-includes/wlwmanifest.xml /news/wp-includes/wlwmanifest.xml /web/wp-includes/wlwmanifest.xml
show less
Web App Attack
Hacking
๐จ๐ณ
WMK965
2026-10-22 20:02:29
(2 days ago)
Malicious requests
IP: 82.102.18.126
Time: 23/Oct/2026:04:02:25 +0800
User-Agent: Mozilla/5.0 (Wind ...
show more
Malicious requests
IP: 82.102.18.126
Time: 23/Oct/2026:04:02:25 +0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Activities:
"GET //wp-includes/wlwmanifest.xml HTTP/2.0" 444 0 "-"
"GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0" 444 0 "-"
"GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 444 0 "-"
"GET //wordpress/wp-includes/wlwmanifest.xml HTTP/2.0" 444 0 "-"
"GET //website/wp-includes/wlwmanifest.xml HTTP/2.0" 444 0 "-"
show less
Bad Web Bot
Web App Attack