๐ง๐ช
cmbplf
2026-10-15 12:32:51
(1 day ago)
7.296 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐บ๐ธ
kosada.com
2026-10-15 12:29:46
(1 day ago)
Repeated requests for suspicious nonexistent URLs, for example: //web/wp-includes/wlwmanifest.xml (H ...
show more
Repeated requests for suspicious nonexistent URLs, for example: //web/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
Web App Attack
๐ซ๐ท
masterguru
2026-10-15 12:20:57
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
Anonymous
2026-10-15 12:13:23
(1 day ago)
[redacted] 136.107.244.197 - - [15/Oct/2026:14:13:20 +0200] "POST //xmlrpc.php HTTP/1.1" 200 426 "-" ...
show more
[redacted] 136.107.244.197 - - [15/Oct/2026:14:13:20 +0200] "POST //xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.107.244.197 - - [15/Oct/2026:14:13:20 +0200] "POST //xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.107.244.197 - - [15/Oct/2026:14:13:20 +0200] "POST //xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.107.244.197 - - [15/Oct/2026:14:13:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
[redacted] 136.107.244.197 - - [15/Oct/2026:14:13:21 +0200] "POST //xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 (Wind
...
show less
Hacking
Web App Attack
๐บ๐ธ
cwytech
2026-10-15 12:11:42
(1 day ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/wordpress-xmlrpc-bf-slow-high.
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-10-15 12:05:34
(1 day ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-15 12:01:34
(1 day ago)
136.107.244.197 - - [15/Oct/2026:08:01:32 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5414 "-" "Mozil ...
show more
136.107.244.197 - - [15/Oct/2026:08:01:32 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:08:01:32 -0400] "GET //?author=1 HTTP/1.1" 301 4684 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:08:01:33 -0400] "GET //?author=2 HTTP/1.1" 301 4680 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:08:01:33 -0400] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 12611 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:08:01:33 -0400] "POST //xmlrpc.php HTTP/1.1" 200 5066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
...
show less
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-10-15 11:59:59
(1 day ago)
Malicious activity from IP detected: crowdsecurity/http-probing.
Web App Attack
Hacking
๐บ๐ธ
IndigoRidge
2026-10-15 11:43:01
(1 day ago)
136.107.244.197 - - [15/Oct/2026:07:43:00 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5558 "-" "Mozil ...
show more
136.107.244.197 - - [15/Oct/2026:07:43:00 -0400] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:07:43:00 -0400] "GET //?author=1 HTTP/1.1" 301 4793 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:07:43:00 -0400] "GET //?author=2 HTTP/1.1" 301 4806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:07:43:00 -0400] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 14115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.107.244.197 - - [15/Oct/2026:07:43:00 -0400] "POST //xmlrpc.php HTTP/1.1" 200 5234 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
...
show less
Web App Attack
๐ซ๐ท
masterguru
2026-10-15 11:41:00
(1 day ago)
(xmlrpc) Apache: Failed xmlrpc access from 136.107.244.197 (US/United States/197.244.107.136.bc.goog ...
show more
(xmlrpc) Apache: Failed xmlrpc access from 136.107.244.197 (US/United States/197.244.107.136.bc.googleusercontent.com): 10 in the last 3600 secs (0-180)
show less
Hacking
๐ฎ๐น
VHosting
2026-10-15 11:40:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐จ๐ฟ
SystemAdmin
2026-10-15 11:36:37
(1 day ago)
Doing bad things...
Web App Attack
๐จ๐ญ
zynex
2026-10-15 11:34:09
(1 day ago)
URL Probing: /fr/home/2020/wp-includes/wlwmanifest.xml
Web App Attack
๐ช๐ธ
robotstxt
2026-10-15 11:16:50
(1 day ago)
136.107.244.197 - - [15/Oct/2026:11:16:13 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd H ...
show more
136.107.244.197 - - [15/Oct/2026:11:16:13 +0000] "GET //wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="136.107.244.197"
136.107.244.197 - - [15/Oct/2026:11:16:14 +0000] "GET //wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="136.107.244.197"
136.107.244.197 - - [15/Oct/2026:11:16:14 +0000] "GET //wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" edge="136.107.244.197"
136.107.244.197 - - [15/Oct/2026:11:16:15 +0000] "GET //wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win
...
show less
Web App Attack