๐ฉ๐ช
LRob.fr
2026-06-25 02:00:03
(9 hours ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ช๐ธ
pipeline.es
2026-06-24 22:24:45
(13 hours ago)
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: mi ...
show more
Web scanning / probing for vulnerable paths | URL: //site/wp-includes/wlwmanifest.xml | Evidence: minhaviagemraiodesol.com 178.128.212.144 - - [25/Jun/2026:00:24:16 +0200] \"GET //site/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 18587 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36\" GEOIP_COUNTRY_CODE=SG | ASN: DIGITALOCEAN-ASN | Country: SG
show less
Port Scan
Web App Attack
๐บ๐ธ
ruusvuu
2026-06-24 19:21:07
(16 hours ago)
Automated abuse report: 50 attack/probe requests from DigitalOcean, LLC / SG.
Targeted paths: //wp-i ...
show more
Automated abuse report: 50 attack/probe requests from DigitalOcean, LLC / SG.
Targeted paths: //wp-includes/wlwmanifest.xml, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml.
Sample log lines:
[rulesandprompts] 06/24/2026, 12:21:05 MST | 178.128.212.144 | GET //site/wp-includes/wlwmanifest.xml 404 172b 1.006 ms | ref=-
[rulesandprompts] 06/24/2026, 12:21:06 MST | 178.128.212.144 | GET //cms/wp-includes/wlwmanifest.xml 404 171b 0.745 ms | ref=-
[rulesandprompts] 06/24/2026, 12:21:06 MST | 178.128.212.144 | GET //sito/wp-includes/wlwmanifest.xml 404 172b 1.060 ms | ref=-
Detected by an automated web-server log monitor.
show less
Web App Attack
Anonymous
2026-06-24 18:52:25
(16 hours ago)
178.128.212.144 - - [24/Jun/2026:20:52:19 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 ...
show more
178.128.212.144 - - [24/Jun/2026:20:52:19 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [24/Jun/2026:20:52:22 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [24/Jun/2026:20:52:23 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [24/Jun/2026:20:52:24 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [24/Jun/2026:20:52:24 +0200] "GET /website/wp-includes/wlwmanifest.xm
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 08:21:49
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 178.128.212.144 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 178.128.212.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 04:21:46.093815 2026] [security2:error] [pid 16290:tid 16290] [client 178.128.212.144:49817] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fixmyland.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fixmyland.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajuTmukH9FzffJG5k9UwdwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
ELYAZ
2026-06-24 08:16:56
(1 day ago)
(y3) Failed access -byebye- from 178.128.212.144 (SG/Singapore/-): (CF_ENABLE)
Hacking
๐ฉ๐ช
LRob.fr
2026-06-23 23:15:04
(1 day ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐บ๐ธ
n2nguyenn2nguyen
2026-06-23 19:40:15
(1 day ago)
Blocked by YFC Security on https://parcl9.com โ type: xmlrpc_attempts
Brute-Force
Web App Attack
Anonymous
2026-06-23 17:23:06
(1 day ago)
178.128.212.144 - - [23/Jun/2026:19:23:03 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 258 ...
show more
178.128.212.144 - - [23/Jun/2026:19:23:03 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 2586 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [23/Jun/2026:19:23:04 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [23/Jun/2026:19:23:05 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [23/Jun/2026:19:23:05 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [23/Jun/2026:19:23:06 +0200] "GET /website/wp-includes/wlwmanifes
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
ruusvuu
2026-06-22 23:37:36
(2 days ago)
Automated abuse report: 50 attack/probe requests from DigitalOcean, LLC / SG.
Targeted paths: //wp-i ...
show more
Automated abuse report: 50 attack/probe requests from DigitalOcean, LLC / SG.
Targeted paths: //wp-includes/wlwmanifest.xml, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml, //wordpress/wp-includes/wlwmanifest.xml.
Sample log lines:
[rulesandprompts] 06/22/2026, 16:37:35 MST | 178.128.212.144 | GET //test/wp-includes/wlwmanifest.xml 404 172b 0.607 ms | ref=-
[rulesandprompts] 06/22/2026, 16:37:35 MST | 178.128.212.144 | GET //wp2/wp-includes/wlwmanifest.xml 404 171b 0.862 ms | ref=-
[rulesandprompts] 06/22/2026, 16:37:35 MST | 178.128.212.144 | GET //site/wp-includes/wlwmanifest.xml 404 172b 0.695 ms | ref=-
Detected by an automated web-server log monitor.
show less
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-06-22 22:28:32
(2 days ago)
Brute-Force
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-22 22:15:04
(2 days ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ฉ๐ช
Ba-Yu
2026-06-22 21:21:53
(2 days ago)
WP-xmlrpc exploit
Web Spam
Blog Spam
Hacking
Exploited Host
Web App Attack
Anonymous
2026-06-22 16:24:12
(2 days ago)
178.128.212.144 - - [22/Jun/2026:18:24:09 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 258 ...
show more
178.128.212.144 - - [22/Jun/2026:18:24:09 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 2586 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [22/Jun/2026:18:24:10 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [22/Jun/2026:18:24:11 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2594 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [22/Jun/2026:18:24:11 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 2606 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
178.128.212.144 - - [22/Jun/2026:18:24:12 +0200] "GET /website/wp-includes/wlwmanifes
...
show less
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-06-22 09:36:37
(3 days ago)
16.783 requests with url.path //xmlrpc.php
13.904 requests with url.path */xmlrpc.php
933 request ...
show more
16.783 requests with url.path //xmlrpc.php
13.904 requests with url.path */xmlrpc.php
933 requests with url.path */wp-includes/wlwmanifest.xml
show less
Brute-Force
Bad Web Bot