Anonymous
2026-04-24 14:46:29
(4 months ago)
Failed Wordpress Logins
Web App Attack
Anonymous
2026-04-03 05:46:10
(4 months ago)
Failed Wordpress Logins
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-04-01 22:34:00
(4 months ago)
Brute-Force
Web App Attack
Anonymous
2026-03-23 12:46:16
(5 months ago)
Failed Wordpress Logins
Web App Attack
Anonymous
2026-03-18 03:46:10
(5 months ago)
Failed Wordpress Logins
Web App Attack
๐ง๐ช
Ivo Vynckier
2026-03-16 15:29:00
(5 months ago)
3.22.242.147 - - [13/Mar/2026:20:34:58 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6 ...
show more
3.22.242.147 - - [13/Mar/2026:20:34:58 +0100] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
3.22.242.147 - - [13/Mar/2026:20:34:58 +0100] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 796 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
3.22.242.147 - - [13/Mar/2026:20:34:58 +0100] "GET //website/wp-includes/wlwmanifest.xml HTTP/1.1" 404 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
show less
Web App Attack
๐น๐ท
rtbh.com.tr
2026-03-15 20:12:04
(5 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
Anonymous
2026-03-15 10:46:11
(5 months ago)
Failed Wordpress Logins
Web App Attack
๐บ๐ธ
MuttMutt
2026-03-14 02:21:00
(5 months ago)
Automated vulnerability reconnaissance originating from AWS infrastructure. This actor is executing ...
show more
Automated vulnerability reconnaissance originating from AWS infrastructure. This actor is executing high-velocity directory brute-forcing targeting the wlwmanifest.xml and xmlrpc.php endpoints across dozens of common WordPress subdirectories (e.g., /sito/, /cms/, /shop/, /blog/). The signature involves systematic probing for Windows Live Writer manifest files to identify WordPress installations and potential vulnerabilities. The bot's rapid-fire request pattern and targeting of legacy entry points across multiple hours indicate a coordinated reconnaissance effort for unauthorized access.
show less
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-03-14 01:54:58
(5 months ago)
Brute-Force
Web App Attack
Anonymous
2026-03-14 01:46:09
(5 months ago)
Failed Wordpress Logins
Web App Attack
Anonymous
2026-03-13 23:05:17
(5 months ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Malicious User-Agent
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
strefapi_com
2026-03-13 20:45:58
(5 months ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐ฌ๐ง
Mendip_Defender
2026-03-13 20:21:35
(5 months ago)
3.22.242.147 - - [13/Mar/2026:20:21:30 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 4938 ...
show more
3.22.242.147 - - [13/Mar/2026:20:21:30 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.0" 404 4938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
3.22.242.147 - - [13/Mar/2026:20:21:31 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 4938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
3.22.242.147 - - [13/Mar/2026:20:21:31 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 4938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36"
...
show less
Hacking
Web App Attack
๐บ๐ธ
Epimetheus
2026-03-13 20:16:34
(5 months ago)
Unauthorized access attempts:
[GET] /sito/wp-includes/wlwmanifest.xml
[GET] /2018/wp-includes/wlwma ...
show more
Unauthorized access attempts:
[GET] /sito/wp-includes/wlwmanifest.xml
[GET] /2018/wp-includes/wlwmanifest.xml
[GET] /shop/wp-includes/wlwmanifest.xml
[GET] /2019/wp-includes/wlwmanifest.xml
[GET] /test/wp-includes/wlwmanifest.xml
[GET] /web/wp-includes/wlwmanifest.xml
[GET] /wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36
show less
Web App Attack