|
🇨🇭
copestack
|
|
Honeypot hit on ov-4e5936 (fail2ban jail: nginx-compat)
|
Web App Attack
|
|
🇫🇷
vincent_EUDIER
|
|
GUEUDIER WEBAPP - HTTP 5xx Ban
|
Hacking
|
|
🇳🇱
e.fierstra
|
|
excessive HTTP 404 errors
|
Bad Web Bot
|
|
🇩🇪
svr
|
|
Abusive Automated Web Scanner
|
Web App Attack
|
|
🇩🇪
Holger
|
|
URL probing: GET //xmlrpc.php?rsd
|
Web App Attack
|
|
🇩🇪
maxpower
|
|
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.70.122.64 (US/United States/64.122.70.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.70.122.64 - - [25/Sep/2026:12:04: ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 136.70.122.64 (US/United States/64.122.70.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.70.122.64 - - [25/Sep/2026:12:04:25 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" host=mail.fdpimmobiliare.com
136.70.122.64 - - [25/Sep/2026:12:04:25 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" host=mail.fdpimmobiliare.com
2026/09/25 12:04:25 [error] 425715#425715: *146416 access forbidden by rule, client: 136.70.122.64, server: fdpimmobiliare.com, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "mail.fdpimmobiliare.com"
show less
|
Port Scan
|
|
🇬🇧
Aetherweb Ark
|
|
(mod_security) mod_security (id:35002) triggered by 136.70.122.64 (US/United States/64.122.70.136.bc.googleusercontent.com): N in the last X secs
|
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
🇩🇪
yitzhaq
|
|
136.70.122.64 - - [25/Sep/2026:11:42:09 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Se ...
show more
136.70.122.64 - - [25/Sep/2026:11:42:09 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:11:42:09 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:11:42:10 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:11:42:10 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:11:42:10 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.
show less
|
Web App Attack
Hacking
|
|
🇩🇪
rh24
|
|
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 136.70.122.64 (US/United States/64.122.70.136.bc.googleusercontent.com)
|
Hacking
|
|
🇵🇱
Budyn
|
|
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.budyn.xyz | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Win ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.budyn.xyz | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇮
abdubhai
|
|
136.70.122.64 - - [25/Sep/2026:1
...
|
Brute-Force
|
|
🇬🇧
Artelis
|
|
136.70.122.64 - - [25/Sep/2026:09:20:05 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/202 ...
show more
136.70.122.64 - - [25/Sep/2026:09:20:05 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:09:20:05 +0000] "GET //feed/ HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:09:20:05 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:09:20:05 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
136.70.122.64 - - [25/Sep/2026:09:20:06 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
|
Web App Attack
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack
Hacking
|
|
🇦🇺
Klaverstyn
|
|
Excessive HTTP request rate
|
Web App Attack
|