๐ฒ๐ฝ
octageeks.com
2026-09-16 04:17:04
(4 days ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐ฉ๐ช
sfmet-admin
2026-09-15 23:36:32
(4 days ago)
137.184.167.133 - - [15/Sep/2026:23:36:32 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 16 ...
show more
137.184.167.133 - - [15/Sep/2026:23:36:32 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
ruusvuu
2026-09-15 21:37:19
(4 days ago)
Automated abuse report: 15 attack/probe requests from DigitalOcean, LLC / CA.
Targeted paths: //wp-i ...
show more
Automated abuse report: 15 attack/probe requests from DigitalOcean, LLC / CA.
Targeted paths: //wp-includes/wlwmanifest.xml, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml.
Sample log lines:
[rulesandprompts] 09/15/2026, 14:37:16 MST | 137.184.167.133 | GET //site/wp-includes/wlwmanifest.xml 404 172b 0.685 ms | ref=-
[rulesandprompts] 09/15/2026, 14:37:16 MST | 137.184.167.133 | GET //cms/wp-includes/wlwmanifest.xml 404 171b 0.628 ms | ref=-
[rulesandprompts] 09/15/2026, 14:37:17 MST | 137.184.167.133 | GET //sito/wp-includes/wlwmanifest.xml 404 172b 0.664 ms | ref=-
Detected by an automated web-server log monitor.
show less
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-09-15 18:58:23
(4 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐จ๐ฆ
Dolphi
2026-09-15 18:50:03
(4 days ago)
Excessive POST //wp-login.php requests
Brute-Force
Web App Attack
๐บ๐ธ
NXTwoThou
2026-09-15 14:51:58
(5 days ago)
BadRequest
Web App Attack
๐ฉ๐ช
tinect
2026-09-15 14:51:45
(5 days ago)
This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe
Web App Attack
๐บ๐ธ
kosada.com
2026-09-15 10:43:12
(5 days ago)
Repeated requests for suspicious nonexistent URLs, for example: /wordpress/wp-includes/wlwmanifest.x ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /wordpress/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36")
show less
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-15 10:20:07
(5 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-09-15 10:19:00
(5 days ago)
Blocked: Reason='Suspicious traffic score=60 (review-based detection)'; Requests=20
Hacking
๐ฉ๐ช
yitzhaq
2026-09-15 10:01:18
(5 days ago)
137.184.167.133 - - [15/Sep/2026:12:01:14 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 12 ...
show more
137.184.167.133 - - [15/Sep/2026:12:01:14 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 1274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
137.184.167.133 - - [15/Sep/2026:12:01:14 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
137.184.167.133 - - [15/Sep/2026:12:01:14 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1274 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
137.184.167.133 - - [15/Sep/2026:12:01:13 +0200] "GET / HTTP/1.1" 301 551 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
137.184.167.133 - - [15/Sep/2026:12:01:14 +0200] "GET / HTTP/1.1" 200 5338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64
show less
Web App Attack
Hacking
๐ซ๐ท
masterguru
2026-09-15 09:41:25
(5 days ago)
(PERMBLOCK) 137.184.167.133 (CA/Canada/-) has had more than 4 temp blocks in the last 86400 secs (0- ...
show more
(PERMBLOCK) 137.184.167.133 (CA/Canada/-) has had more than 4 temp blocks in the last 86400 secs (0-197)
show less
Hacking
๐บ๐ธ
slay3r9903
2026-09-15 08:25:38
(5 days ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
๐ฉ๐ช
juutis
2026-09-15 08:20:17
(5 days ago)
137.184.167.133 - - [15/Sep/2026:10:20:11 +0200] "POST //wp-login.php HTTP/1.1" 200 9593 "https://ta ...
show more
137.184.167.133 - - [15/Sep/2026:10:20:11 +0200] "POST //wp-login.php HTTP/1.1" 200 9593 "https://taidesuunnistus.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
137.184.167.133 - - [15/Sep/2026:10:20:13 +0200] "POST //wp-login.php HTTP/1.1" 200 9593 "https://taidesuunnistus.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
137.184.167.133 - - [15/Sep/2026:10:20:15 +0200] "POST //wp-login.php HTTP/1.1" 200 9593 "https://taidesuunnistus.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
show less
Web App Attack
๐ซ๐ท
masterguru
2026-09-15 07:40:40
(5 days ago)
(wordpress) Apache: Failed WordPress login from 137.184.167.133 (CA/Canada/-): 10 in the last 3600 s ...
show more
(wordpress) Apache: Failed WordPress login from 137.184.167.133 (CA/Canada/-): 10 in the last 3600 secs (0-197)
show less
Hacking