๐น๐ท
0xi
2026-05-16 14:00:49
(3 months ago)
Malicious scanning and attack activity detected (65 attempts). Targeted ports: 80, 443. Triggered se ...
show more
Malicious scanning and attack activity detected (65 attempts). Targeted ports: 80, 443. Triggered sensors: P0f, Suricata, Fatt, Tanner, H0neytr4p. Observed via distributed honeypot network.
show less
Port Scan
Anonymous
2026-04-21 16:06:32
(4 months ago)
154.16.49.14 - - [21/Apr/2026:18:06:25 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
154.16.49.14 - - [21/Apr/2026:18:06:25 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 104688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [21/Apr/2026:18:06:25 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 104685 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [21/Apr/2026:18:06:25 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 104703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
๐ง๐ท
Halux
2026-04-21 09:50:32
(4 months ago)
154.16.49.14 Web Application Firewall multiple violations
Hacking
Web App Attack
๐บ๐ธ
kosada.com
2026-04-21 05:30:22
(4 months ago)
Web vulnerability probing: /wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml
Web App Attack
๐ฌ๐ง
consul.to
2026-04-21 02:23:17
(4 months ago)
Web attack/malicious scanning detected
Web App Attack
๐ฌ๐ง
andypiper
2026-04-21 01:01:49
(4 months ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐บ๐ธ
TheMadBeaker
2026-04-20 10:24:26
(4 months ago)
Fail2Ban - HTTP Exploit Attempt
Brute-Force
Web App Attack
Anonymous
2026-04-20 09:07:14
(4 months ago)
Malicious Probing/Bad Request
Bad Web Bot
๐ฌ๐ง
consul.to
2026-04-20 02:16:38
(4 months ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-04-20 01:24:39
(4 months ago)
154.16.49.14 - - [20/Apr/2026:03:23:32 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 ...
show more
154.16.49.14 - - [20/Apr/2026:03:23:32 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 200 716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [20/Apr/2026:03:23:32 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 200 716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [20/Apr/2026:03:23:32 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 200 716 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-04-19 19:37:27
(4 months ago)
154.16.49.14 - - [19/Apr/2026:21:37:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 ...
show more
154.16.49.14 - - [19/Apr/2026:21:37:24 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [19/Apr/2026:21:37:22 +0200] "POST //xmlrpc.php HTTP/1.0" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [19/Apr/2026:21:37:25 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [19/Apr/2026:21:37:24 +0200] "POST //xmlrpc.php HTTP/1.0" 200 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [19/Apr/2026:21:37:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.463
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
Bensay
2026-04-19 11:28:57
(4 months ago)
[Sun Apr 19 13:28:56.683589 2026] [authz_core:error] [pid 277206:tid 277223] [client 154.16.49.14:14 ...
show more
[Sun Apr 19 13:28:56.683589 2026] [authz_core:error] [pid 277206:tid 277223] [client 154.16.49.14:14982] AH01630: client denied by server configuration: /var/www/empty/
[Sun Apr 19 13:28:56.795531 2026] [authz_core:error] [pid 277206:tid 277232] [client 154.16.49.14:14982] AH01630: client denied by server configuration: /var/www/empty/wp-includes
...
show less
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
dwmp
2026-04-19 10:41:47
(4 months ago)
154.16.49.14 - - [19/Apr/2026:12:41:46 +0200] "POST //wp-login.php HTTP/1.1" 200 10899 "https://www. ...
show more
154.16.49.14 - - [19/Apr/2026:12:41:46 +0200] "POST //wp-login.php HTTP/1.1" 200 10899 "https://www.fortisenergydrink.it//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [19/Apr/2026:12:41:46 +0200] "POST //wp-login.php HTTP/1.1" 200 11014 "https://www.fortisenergydrink.it//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
154.16.49.14 - - [19/Apr/2026:12:41:47 +0200] "POST //wp-login.php HTTP/1.1" 200 11014 "https://www.fortisenergydrink.it//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Brute-Force
๐ซ๐ท
Kimax
2026-04-19 07:05:27
(4 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ฉ๐ช
todix
2026-04-19 06:50:43
(4 months ago)
Web App Attack Exploid from 154.16.49.14
Web App Attack