|
🇺🇸
not_hanjo_mei
|
|
Scanning for exposed credential files (.env, .git, cloud keys): 38 requests in 24h.
|
Hacking
Web App Attack
|
|
🇺🇸
mnsf
|
|
Abuse Detected (10)
|
Brute-Force
Web App Attack
|
|
🇵🇱
gandaflux
|
|
139.59.30.9 [redacted-domain] - [06/Nov/2026:18:58:40 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 [r ...
show more
139.59.30.9 [redacted-domain] - [06/Nov/2026:18:58:40 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 [redacted-domain] - [06/Nov/2026:18:58:41 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 [redacted-domain] - [06/Nov/2026:18:58:41 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 [redacted-domain] - [06/Nov/2026:18:58:42 +0100] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
ruusvuu
|
|
Automated abuse report: 15 attack/probe requests from DigitalOcean, LLC / IN.
Targeted paths: //wp-includes/wlwmanifest.xml, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml, //website/wp- ...
show more
Automated abuse report: 15 attack/probe requests from DigitalOcean, LLC / IN.
Targeted paths: //wp-includes/wlwmanifest.xml, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml, //website/wp-includes/wlwmanifest.xml.
Sample log lines:
[mirassertions] 2026-11-06 07:47:17: 11/6/2026 07:47:17 139.59.30.9 GET //media/wp-includes/wlwmanifest.xml 404 4426 1.823 ms -
[mirassertions] 2026-11-06 07:47:17: 11/6/2026 07:47:17 139.59.30.9 GET //wp2/wp-includes/wlwmanifest.xml 404 4426 2.050 ms -
[mirassertions] 2026-11-06 07:47:18: 11/6/2026 07:47:18 139.59.30.9 GET //site/wp-includes/wlwmanifest.xml 404 4426 1.380 ms -
Detected by an automated web-server log monitor.
show less
|
Web App Attack
|
|
🇫🇷
Kenshin869
|
|
Wordpress unauthorized access attempt
|
Brute-Force
|
|
🇩🇪
rh24
|
|
(wordpress) Failed wordpress login from 139.59.30.9 (IN/India/-): (CF_ENABLE)
|
Brute-Force
|
|
🇫🇷
masterguru
|
|
(wordpress) Apache: Failed WordPress login from 139.59.30.9 (IN/India/-): 10 in the last 3600 secs (0-193)
|
Hacking
|
|
🇺🇸
IndigoRidge
|
|
139.59.30.9 - - [05/Nov/2026:16:58:16 -0500] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 5040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026: ...
show more
139.59.30.9 - - [05/Nov/2026:16:58:16 -0500] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 301 5040 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:16:58:16 -0500] "GET //xmlrpc.php?rsd HTTP/1.1" 200 5797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:16:58:17 -0500] "GET //?author=1 HTTP/1.1" 301 4930 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:16:58:18 -0500] "GET //?author=2 HTTP/1.1" 301 4946 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:16:58:18 -0500] "GET //wp-json/wp/v2/users/ HTTP/1.1" 200 26212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML
...
show less
|
Web App Attack
|
|
🇩🇪
KiekerJan
|
|
139.59.30.9 - - [05/Nov/2026:22:56:43 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:2 ...
show more
139.59.30.9 - - [05/Nov/2026:22:56:43 +0100] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:22:56:43 +0100] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇮🇪
Jim Keir
|
|
2026-11-05 21:52:05 139.59.30.9 File scanning, blocking 139.59.30.9 for 5 minutes
|
Web App Attack
|
|
🇳🇱
ipoac.nl
|
|
-.nl:443 139.59.30.9 - - [05/Nov/2026:21:43:59 +0100] -.nl "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 1972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
|
Bad Web Bot
|
|
🇳🇱
ConsulHosting
|
|
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
|
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 139.59.30.9 - - [05/Nov/2026:21:31:23 +0100] "POST //xmlrpc.php HTTP/1.1" 301 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe ...
show more
[ti-27al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 139.59.30.9 - - [05/Nov/2026:21:31:23 +0100] "POST //xmlrpc.php HTTP/1.1" 301 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:21:31:24 +0100] "POST //wp-login.php HTTP/1.1" 200 11063 "https://www.vissenoploosdrecht.nl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
139.59.30.9 - - [05/Nov/2026:21:31:24 +0100] "POST //wp-login.php HTTP/1.1" 200 11063 "https://www.vissenoploosdrecht.nl//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
vissenoplo
...
show less
|
Brute-Force
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
excessive HTTP 404 errors
|
Bad Web Bot
|
|
🇳🇱
Site.eu
|
|
WordPress login brute force (wp-login/xmlrpc login attempts)
|
Brute-Force
Web App Attack
|