Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1, GET //wp2/wp- ...
show moreBot / scanning and/or hacking attempts: GET / HTTP/1.1, GET //xmlrpc.php?rsd HTTP/1.1, GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1, GET //media/wp-includes/wlwmanifest.xml HTTP/1.1, GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1, GET //2018/wp-includes/wlwmanifest.xml HTTP/1.1, GET //news/wp-includes/wlwmanifest.xml HTTP/1.1, GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1, GET //site/wp-includes/wlwmanifest.xml HTTP/1.1, GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1, GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1, GET //website/wp-includes/wlwmanifest.xml HTTP/1.1, GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1, GET //test/wp-includes/wlwmanifest.xml HTTP/1.1, GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1
show less
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 142.93.73.55, Reason:[ ...
show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 142.93.73.55, Reason:[(manifest) WordPress wlwmanifest.xml Attack 142.93.73.55 (US/United States/-): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
{"ClientAddr":"142.93.73.55:50286","ClientHost":"142.93.73.55","ClientPort":"50286","ClientUsername" ...
show more{"ClientAddr":"142.93.73.55:50286","ClientHost":"142.93.73.55","ClientPort":"50286","ClientUsername":"-","DownstreamContentSize":416,"DownstreamStatus":403,"Duration":177295135,"OriginContentSize":416,"OriginDuration":174478287,"OriginStatus":403,"Overhead":2816848,"RequestAddr":"www.cleveradmin.de","RequestContentSize":488,"RequestCount":1199954,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-06-04T02:24:19.442357671+02:00","StartUTC":"2026-06-04T00:24:19.442357671Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-04T02:24:19+02:00"}
{"ClientAddr":"142.93.73.55:50286","ClientHost":"142.93.73.55","Clie
...
show less
Brute-Force
Web App Attack
Anonymous
GET wp-includes/wlwmanifest.xml | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( ...
show moreGET wp-includes/wlwmanifest.xml | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 | Time: 2026-06-03 23:57:28 UTC
show less
Web App Attack
Showing 1 to
15
of 43 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩