πΊπΈ
mnsf
2026-06-30 13:05:34
(1 day ago)
Abuse Detected (1)
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-30 12:43:24
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 34.181.160.6 (6.160.181.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.181.160.6 (6.160.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:43:18.804983 2026] [security2:error] [pid 9639:tid 9639] [client 34.181.160.6:56129] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||gracebaptisthartsville.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "gracebaptisthartsville.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "akO55k1s0Ehia-wah7msBgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-30 12:42:50
(1 day ago)
Blocked by siteaihub.com: auto: matched wildcard:/*wp-includes/wlwmanifest.xml
Web App Attack
Hacking
π©πͺ
big-cloud.nl
2026-06-30 12:39:03
(1 day ago)
Try to access /xmlrpc.php?rsd
Web App Attack
π©πͺ
Hary74656
2026-06-30 12:38:50
(1 day ago)
[Tue Jun 30 14:38:41.909328 2026] [authz_core:error] [pid 359906:tid 360071] [client 34.181.160.6:63 ...
show more
[Tue Jun 30 14:38:41.909328 2026] [authz_core:error] [pid 359906:tid 360071] [client 34.181.160.6:63446] AH01630: client denied by server configuration: /home/harald/www/aschi.at/xmlrpc.php
...
show less
Bad Web Bot
π©πͺ
IVski
2026-06-30 12:38:31
(1 day ago)
IVski WAF | WordPress scanner detected - probing wp-content, xmlrpc or wp-login
Port Scan
Brute-Force
Web App Attack
πΊπΈ
lostswordfish.com
2026-06-30 12:30:07
(1 day ago)
Wordfence waf block on ilvoices1
Web App Attack
πΊπΈ
OceanTreasure
2026-06-30 12:27:24
(1 day ago)
tcp/443; Windows Live Writer manifest enumeration: "GET //wp-includes/wlwmanifest.xml" @ 2026-06-30T ...
show more
tcp/443; Windows Live Writer manifest enumeration: "GET //wp-includes/wlwmanifest.xml" @ 2026-06-30T12:19:28Z [proxy]
show less
Brute-Force
πΊπΈ
Rocky Mountain Bioengineering Symposium
2026-06-30 12:24:19
(1 day ago)
34.181.160.6 - - [30/Jun/2026:06:24:18 -0600] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 4504 ...
show more
34.181.160.6 - - [30/Jun/2026:06:24:18 -0600] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 4504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Web App Attack
πΊπΈ
masterguru
2026-06-30 12:23:09
(1 day ago)
WordPress: User enumeration. Pattern match "(author\\\\= (88030-147)
Hacking
π©πͺ
macrob
2026-06-30 12:22:56
(1 day ago)
2026/06/30 12:22:52 [error] 624832#624832: *340727671 access forbidden by rule, client: 34.181.160.6 ...
show more
2026/06/30 12:22:52 [error] 624832#624832: *340727671 access forbidden by rule, client: 34.181.160.6, server: binofferes.com, request: "GET //wp-includes/wlwmanifest.xml HTTP/1.1", host: "binofferes.com"
2026/06/30 12:22:52 [error] 624832#624832: *340727671 access forbidden by rule, client: 34.181.160.6, server: binofferes.com, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "binofferes.com"
2026/06/30 12:22:55 [error] 624832#624832: *340727671 access forbidden by rule, client: 34.181.160.6, server: binofferes.com, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "binofferes.com"
...
show less
Web App Attack
π³π±
wlt-blocker
2026-06-30 12:16:23
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
πΊπΈ
kosada.com
2026-06-30 12:15:53
(1 day ago)
Web vulnerability probing: /website/wp-includes/wlwmanifest.xml
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-30 12:13:27
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 34.181.160.6 (6.160.181.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:225170) triggered by 34.181.160.6 (6.160.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 08:13:20.807357 2026] [security2:error] [pid 3197:tid 3197] [client 34.181.160.6:59669] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||azdar.am|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "azdar.am"] [uri "/wp-json/wp/v2/users/"] [unique_id "akOy4OzjbhPZ-xSNBUk6DQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨π
zynex
2026-06-30 12:04:09
(1 day ago)
URL Probing: /2018/wp-includes/wlwmanifest.xml
Web App Attack