Anonymous
2026-09-08 10:07:07
(12 hours ago)
Abuse detected: rate-limit and/or cross-site thresholds exceeded.
Bad Web Bot
Anonymous
2026-09-08 09:17:14
(13 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
mnsf
2026-09-08 09:05:30
(13 hours ago)
Abuse Detected (18)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-08 08:58:50
(13 hours ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-09-08 08:49:46
(13 hours ago)
[redacted] 136.70.92.125 - - [08/Sep/2026:10:49:38 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 136.70.92.125 - - [08/Sep/2026:10:49:38 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:49:39 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:49:40 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:49:41 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:49:41 +0200] "POST //xmlrpc.php HTTP/1.1" 2
...
show less
Hacking
Web App Attack
🇷🇴
iulianh
2026-09-08 08:49:34
(13 hours ago)
80,443
Brute-Force
SSH
🇩🇪
IVski.com
2026-09-08 08:39:14
(14 hours ago)
IVski WAF | WordPress scanner detected - probing wp-includes/wlwmanifest.xml
Hacking
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-08 08:38:31
(14 hours ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-201)
Hacking
🇧🇪
cmbplf
2026-09-08 08:35:52
(14 hours ago)
1.216 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇩🇪
FeG Deutschland
2026-09-08 08:31:51
(14 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
Anonymous
2026-09-08 08:25:14
(14 hours ago)
136.70.92.125 - - [08/Sep/2026:10:25:12 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 " ...
show more
136.70.92.125 - - [08/Sep/2026:10:25:12 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.70.92.125 - - [08/Sep/2026:10:25:12 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.70.92.125 - - [08/Sep/2026:10:25:13 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.70.92.125 - - [08/Sep/2026:10:25:13 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
136.70.92.125 - - [08/Sep/2026:10:25:13 +0200] "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1
...
show less
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-08 08:25:06
(14 hours ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
US/United States/125.92.70.136.bc.googleusercontent.com
Web App Attack
🇫🇷
masterguru
2026-09-08 08:23:08
(14 hours ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-193)
Hacking
Anonymous
2026-09-08 08:22:20
(14 hours ago)
[redacted] 136.70.92.125 - - [08/Sep/2026:10:22:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ...
show more
[redacted] 136.70.92.125 - - [08/Sep/2026:10:22:10 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:22:11 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:22:12 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:22:13 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
[redacted] 136.70.92.125 - - [08/Sep/2026:10:22:14 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/
...
show less
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-09-08 08:20:23
(14 hours ago)
Try to access /xmlrpc.php?rsd
Web App Attack