security for public django site

When I check the analytics on my site, I'm getting lots of error pages and bounces for URL's ending in: wordpresswp-includeswlwmanifest

hello, I have a public django site on a domain I recently deployed, looking through the logs I see some sort of a crawler or penetration

slot machines odds !> adminUrl> postEditingUrl> ![CDATA[ {blog-postapi-url} wp-admin?action=edit&post={post-id}

slot machine games free download !> adminUrl> postEditingUrl> ![CDATA[ {blog-postapi-url} wp-admin?action=edit&post={post-id}