๐ฉ๐ช
LRob
2026-07-16 16:19:30
(1 week ago)
CrowdSec: crowdsecurity/http-probing | req: //wp-includes/wlwmanifest.xml | 10 distinct paths | UA: ...
show more
CrowdSec: crowdsecurity/http-probing | req: //wp-includes/wlwmanifest.xml | 10 distinct paths | UA: -
show less
Port Scan
Web App Attack
๐บ๐ธ
conrad10781
2026-07-16 16:13:44
(1 week ago)
nginx-4xx
Web App Attack
๐ฎ๐ฉ
Burayot
2026-07-16 16:12:31
(1 week ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.76.25.183 (BE/Belgium/183.25.76. ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.76.25.183 (BE/Belgium/183.25.76.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
PlexLads
2026-07-16 16:09:53
(1 week ago)
34.76.25.183 - - [16/Jul/2026:09:09:49 -0700] "GET / HTTP/1.1" 401 5333 "-" "Mozilla/5.0 (Windows NT ...
show more
34.76.25.183 - - [16/Jul/2026:09:09:49 -0700] "GET / HTTP/1.1" 401 5333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 34.76.25.183 - - [16/Jul/2026:09:09:50 -0700] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 34.76.25.183 - - [16/Jul/2026:09:09:50 -0700] "GET //xmlrpc.php?rsd HTTP/1.1" 400 501 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 34.76.25.183 - - [16/Jul/2026:09:09:51 -0700] "GET / HTTP/1.1" 401 5333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" 34.76.25.183 - - [16/Jul/2026:09:09:51 -0700] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like
...
show less
Hacking
Web App Attack
๐ฉ๐ช
enjoyably
2026-07-16 16:09:46
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ซ๐ท
Baking333
2026-07-16 16:01:26
(1 week ago)
[redacted] 34.76.25.183 - - [16/Jul/2026:17:01:23 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 ...
show more
[redacted] 34.76.25.183 - - [16/Jul/2026:17:01:23 +0100] "GET //wp-includes/[redacted] HTTP/1.1" 302 6798 0/67157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36" [redacted] 34.76.25.183 - - [16/Jul/2026:17:01:24 +0100] "GET //[redacted]?rsd HTTP/1.1" 302 1579 0/52390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
YF
2026-07-16 16:00:14
(1 week ago)
WordPress author enumeration
Web App Attack
๐ฉ๐ช
Hary74656
2026-07-16 15:56:26
(1 week ago)
[Thu Jul 16 17:56:18.278626 2026] [core:info] [pid 342861:tid 342914] [client 34.76.25.183:56080] AH ...
show more
[Thu Jul 16 17:56:18.278626 2026] [core:info] [pid 342861:tid 342914] [client 34.76.25.183:56080] AH00128: File does not exist: /home/harald/www/matomo/blog/wp-includes/wlwmanifest.xml
...
show less
Bad Web Bot
๐ฌ๐ง
pinguin
2026-07-16 15:51:45
(1 week ago)
Triggered Cloudflare WAF (linkMaze) from BE.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GE ...
show more
Triggered Cloudflare WAF (linkMaze) from BE.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: //wp2/wp-includes/wlwmanifest.xml
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฎ๐น
VHosting
2026-07-16 15:50:03
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐จ๐ญ
zynex
2026-07-16 15:44:30
(1 week ago)
URL Probing: /news/wp-includes/wlwmanifest.xml
Web App Attack
Anonymous
2026-07-16 15:43:11
(1 week ago)
34.76.25.183 - - [16/Jul/2026:17:43:06 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 548 " ...
show more
34.76.25.183 - - [16/Jul/2026:17:43:06 +0200] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36"
...
show less
Web App Attack
๐ซ๐ท
GoodOldTOS
2026-07-16 15:43:11
(1 week ago)
Bad keywords detected in request: /wp-includes/
Web App Attack
๐ฌ๐ง
Oakley
2026-07-16 15:42:29
(1 week ago)
(mod_security) mod_security (id:900191) triggered by 34.76.25.183 (BE/Belgium/183.25.76.34.bc.google ...
show more
(mod_security) mod_security (id:900191) triggered by 34.76.25.183 (BE/Belgium/183.25.76.34.bc.googleusercontent.com): 5 in the last 900 secs
show less
Web App Attack
Hacking
๐ณ๐ฑ
MM-bot
2026-07-16 15:40:29
(1 week ago)
URL-probe: HTTP/1.1 GET request on //wp-includes/wlwmanifest.xml (2026-07-16 17:40:29 UTC+2)
Web App Attack
Hacking