Web attack blocked by WAF: POST /xmlrpc.php, GET /wp-json/wp/v2/users (XMLRPC fault response; Monito ...
show moreWeb attack blocked by WAF: POST /xmlrpc.php, GET /wp-json/wp/v2/users (XMLRPC fault response; Monitoring WordPress 5.3 User Enumeration attempts).
[17/Oct/2026:16:54:52 +0300] "POST /xmlrpc.php HTTP/1.1" UA="Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/" -> XMLRPC fault response
[17/Oct/2026:16:56:57 +0300] "GET /wp-json/wp/v2/users HTTP/1.1" UA="Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)" -> Monitoring WordPress 5.3 User Enumeration attempts; Possible WordPress Dashboard access for infectors
show less
Web attack blocked by WAF: GET //wp-includes/wlwmanifest.xml, GET //xmlrpc.php, GET // (WordPress pl ...
show moreWeb attack blocked by WAF: GET //wp-includes/wlwmanifest.xml, GET //xmlrpc.php, GET // (WordPress plugins/themes version enumeration; WordPress plugins/themes version enumeration using wlwmanifest.xml).
[17/Oct/2026:16:41:45 +0300] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> WordPress plugins/themes version enumeration; WordPress plugins/themes version enumeration using…
[17/Oct/2026:16:41:47 +0300] "GET //xmlrpc.php?rsd HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> CMS Recon Bot detected; Really Simple Discovery to xmlrpc
[17/Oct/2026:16:41:47 +0300] "GET //?author=2 HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Track WordPress users enumeration
show less
Web attack blocked by WAF: GET /wp-json/wp/v2/users, POST /xmlrpc.php (Monitoring WordPress 5.3 User ...
show moreWeb attack blocked by WAF: GET /wp-json/wp/v2/users, POST /xmlrpc.php (Monitoring WordPress 5.3 User Enumeration attempts; Possible WordPress Dashboard access for infectors).
[17/Oct/2026:16:33:34 +0300] "GET /wp-json/wp/v2/users HTTP/1.1" UA="Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)" -> Monitoring WordPress 5.3 User Enumeration attempts; Possible WordPress Dashboard access for infectors
[17/Oct/2026:16:34:11 +0300] "POST /xmlrpc.php HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Fire" -> WordPress XML-RPC access attempt; XMLRPC fault response
show less
Web attack blocked by WAF: GET /wp-json/wp/v2/users x4 (Monitoring WordPress 5.3 User Enumeration at ...
show moreWeb attack blocked by WAF: GET /wp-json/wp/v2/users x4 (Monitoring WordPress 5.3 User Enumeration attempts).
[17/Oct/2026:15:54:50 +0300] "GET /wp-json/wp/v2/users?slug=a23&_fields=slug,avatar_urls HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts
[17/Oct/2026:15:54:58 +0300] "GET /wp-json/wp/v2/users?slug=ssevvdanur&_fields=slug,avatar_urls HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts
[17/Oct/2026:15:55:00 +0300] "GET /wp-json/wp/v2/users?slug=dilanekc1_&_fields=slug,avatar_urls HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts
show less
Web attack blocked by WAF: GET /wp-json/wp/v2/users x4 (Monitoring WordPress 5.3 User Enumeration at ...
show moreWeb attack blocked by WAF: GET /wp-json/wp/v2/users x4 (Monitoring WordPress 5.3 User Enumeration attempts).
[17/Oct/2026:15:50:08 +0300] "GET /wp-json/wp/v2/users?slug=dilanekc1_&_fields=id,slug HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts
[17/Oct/2026:15:50:23 +0300] "GET /wp-json/wp/v2/users?slug=eylulkitap&_fields=id,slug HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts
[17/Oct/2026:15:53:28 +0300] "GET /wp-json/wp/v2/users?slug=cagla_k&_fields=slug,avatar_urls HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts
show less
Web attack blocked by WAF: GET /__vite_rsc_findSourceMapURL x4, GET /.env x2, GET /50vybb9fvs5ethyy0 ...
show moreWeb attack blocked by WAF: GET /__vite_rsc_findSourceMapURL x4, GET /.env x2, GET /50vybb9fvs5ethyy0wyq (Fake Googlebot detected (IP not in Google ranges); Block System File Attempt).
[17/Oct/2026:15:40:18 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc HTTP/1.1" UA="Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" -> Suspicious input in URI tracking
[17/Oct/2026:15:40:18 +0300] "GET /@fs/src/.env?import&raw?? HTTP/1.1" UA="Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" -> Direct access to sensitive file or dotfile
[17/Oct/2026:15:40:18 +0300] "GET /@fs/../.env?import&raw?? HTTP/1.1" UA="Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" -> Direct access to sensitive file or dotfile
[17/Oct/2026:15:40:18 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/1.1" UA="DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" -> Suspicious input in URI tracking
show less
Web attack blocked by WAF: GET /wp-json/wp/v2/users x2 (Monitoring WordPress 5.3 User Enumeration at ...
show moreWeb attack blocked by WAF: GET /wp-json/wp/v2/users x2 (Monitoring WordPress 5.3 User Enumeration attempts; Possible WordPress Dashboard access for infectors).
[17/Oct/2026:15:33:08 +0300] "GET /wp-json/wp/v2/users?capabilities=edit_others_posts&per_page=100&_fields=slug HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attemp…
[17/Oct/2026:15:33:12 +0300] "GET /wp-json/wp/v2/users?who=authors&per_page=100&_fields=slug,id HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts; Possible Wor…
show less
Web attack blocked by WAF: GET /wp-json/wp/v2/users x2 (Monitoring WordPress 5.3 User Enumeration at ...
show moreWeb attack blocked by WAF: GET /wp-json/wp/v2/users x2 (Monitoring WordPress 5.3 User Enumeration attempts; Possible WordPress Dashboard access for infectors).
[17/Oct/2026:15:33:06 +0300] "GET /wp-json/wp/v2/users?capabilities=manage_options&per_page=100&_fields=slug HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts;…
[17/Oct/2026:15:33:11 +0300] "GET /wp-json/wp/v2/users?capabilities=edit_posts&per_page=100&_fields=slug HTTP/1.1" UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)" -> Monitoring WordPress 5.3 User Enumeration attempts; Pos…
show less
Web App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.