(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 136.87.73.149 (US/United States/149.73. ...
show more(wlwmanifest) wlwmanifest.xml scanner (WordPress probe) from 136.87.73.149 (US/United States/149.73.87.136.bc.googleusercontent.com)
show less
(wordpress) Failed wordpress login from 136.87.73.149 (US/United States/149.73.87.136.bc.googleuserc ...
show more(wordpress) Failed wordpress login from 136.87.73.149 (US/United States/149.73.87.136.bc.googleusercontent.com)
show less
Repeated requests for suspicious nonexistent URLs, for example: /wp-includes/id3/license.txt/wordpre ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /wp-includes/id3/license.txt/wordpress/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
WordPress attack-tool calls | method: GET | path: //xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; W ...
show moreWordPress attack-tool calls | method: GET | path: //xmlrpc.php | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
show less
Detected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules ...
show moreDetected by CrowdSec IDS on a self-hosted server. Target: HTTP/HTTPS (ports 80/443). Triggered rules: http-probing. 11 matching log events between 2026-10-14T10:09:04Z and 10:09:06Z (UTC). Sample requests: GET //wp-includes/ID3/license.txt -> 404; GET //xmlrpc.php?rsd -> 404; GET //blog/wp-includes/wlwmanifest.xml -> 404; GET //web/wp-includes/wlwmanifest.xml -> 404; GET //wordpress/wp-includes/wlwmanifest.xml -> 404; GET //wp/wp-includes/wlwmanifest.xml -> 404; GET //2020/wp-includes/wlwmanifest.xml -> 404; GET //2019/wp-includes/wlwmanifest.xml -> 404; GET //2021/wp-includes/wlwmanifest.xml -> 404; GET //shop/wp-includes/wlwmanifest.xml -> 404; GET //wp1/wp-includes/wlwmanifest.xml -> 404
show less
Port Scan
Web App Attack
Showing 1 to
15
of 20 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ