๐บ๐ธ
kosada.com
2026-09-23 13:12:51
(1 week ago)
Repeated requests for suspicious nonexistent URLs, for example: /[redacted]/blog/wp-includes/wlwmani ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /[redacted]/blog/wp-includes/wlwmanifest.xml (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36")
show less
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-23 13:10:51
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ง๐ฌ
HighWay
2026-09-23 13:09:47
(1 week ago)
34.24.137.165 - - [23/Sep/2026:13:09:43 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 5889 ...
show more
34.24.137.165 - - [23/Sep/2026:13:09:43 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 5889 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:13:09:43 +0000] "GET //feed/ HTTP/1.1" 404 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:13:09:43 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:13:09:43 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:13:09:43 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-23 13:05:45
(1 week ago)
Abuse Detected (9)
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-23 12:59:47
(1 week ago)
34.24.137.165 - - [23/Sep/2026:14:59:44 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.24.137.165 - - [23/Sep/2026:14:59:44 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:14:59:44 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:14:59:45 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:14:59:45 +0200] "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:14:59:44 +0200] "GET / HTTP/1.1" 200 1500 "-" "Mozilla/5.0 (Windows
show less
Web App Attack
Hacking
๐ท๐ด
clauss
2026-09-23 12:53:45
(1 week ago)
34.24.137.165 - - [23/Sep/2026:15:53:36 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0" 301 ...
show more
34.24.137.165 - - [23/Sep/2026:15:53:36 +0300] "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:15:53:37 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:15:53:38 +0300] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:15:53:38 +0300] "GET //wp/wp-includes/wlwmanifest.xml HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:15:53:39 +0300] "GET //2020/wp-includes/wlwmanifest.xml HTTP/2.0" 301 0
...
show less
Web App Attack
๐ต๐ฑ
ToJa
2026-09-23 12:46:48
(1 week ago)
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
34.24.137.165 - - [23/Sep/202 ...
show more
Web App Port Scaning, Access Not Existent Virtual Server. (honeypot)::
34.24.137.165 - - [23/Sep/2026:14:46:44 +0200] "" 400 0 "-" "-"
show less
Web App Attack
๐ฉ๐ช
KiekerJan
2026-09-23 12:42:44
(1 week ago)
34.24.137.165 - - [23/Sep/2026:14:42:44 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.24.137.165 - - [23/Sep/2026:14:42:44 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:14:42:44 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
๐จ๐ฆ
TechnoSolutions CL
2026-09-23 12:40:53
(1 week ago)
34.24.137.165 - - [23/Sep/2026:12:40:53 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 ...
show more
34.24.137.165 - - [23/Sep/2026:12:40:53 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 4996 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.24.137.165 - - [23/Sep/2026:12:40:53 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 200 4993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฏ๐ต
weils.net
2026-09-23 12:38:30
(1 week ago)
2026-09-23 20:38:29(GMT+8) - /cms/wp-includes/wlwmanifest.xml
Bad Web Bot
๐ง๐พ
lns.bz
2026-09-23 12:37:25
(1 week ago)
Too many 404 requests [BY]
Web App Attack
๐จ๐ญ
zynex
2026-09-23 12:30:49
(1 week ago)
URL Probing: /wp1/wp-includes/wlwmanifest.xml
Web App Attack
Anonymous
2026-09-23 12:30:02
(1 week ago)
CrowdSec decision: crowdsecurity/http-probing (origin: crowdsec)
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-23 12:29:59
(1 week ago)
Try to access /xmlrpc.php?rsd
Web App Attack
๐จ๐ญ
Origon
2026-09-23 12:18:37
(1 week ago)
http-probing - IP: 34.24.137.165 - time="2026-09-23T14:18:37+02:00" level=info msg="(555f66b4f6a745 ...
show more
http-probing - IP: 34.24.137.165 - time="2026-09-23T14:18:37+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.24.137.165 (US/396982) : 4h ban on Ip 34.24.137.165" module=db
show less
Web App Attack