๐ง๐ช
Saec
2026-10-01 17:37:06
(3 weeks ago)
Jarvis auto-ban: Honeypot /wp-admin/css/admin.php via saec.me [US] ASN:Prefixx, Inc.
Port Scan
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-29 16:33:17
(4 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐บ๐ธ
ArturShelby
2026-09-28 10:46:28
(4 weeks ago)
Suspicious path access: /wp-includes/id3/license.txt
Web App Attack
๐ต๐ฑ
Budyn
2026-09-27 17:28:53
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.astropot.tech | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
TechnoSolutions CL
2026-09-27 17:04:09
(1 month ago)
216.73.160.133 - - [27/Sep/2026:17:04:07 +0000] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 30 ...
show more
216.73.160.133 - - [27/Sep/2026:17:04:07 +0000] "GET //shop/wp-includes/wlwmanifest.xml HTTP/1.1" 308 44 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
216.73.160.133 - - [27/Sep/2026:17:04:08 +0000] "GET //wp1/wp-includes/wlwmanifest.xml HTTP/1.1" 308 43 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-27 08:13:55
(1 month ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.definitelynotahoneypot.top | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-27 04:49:18
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฉ๐ช
Blexyel
2026-09-27 04:46:48
(1 month ago)
216.73.160.133 - - [27/Sep/2026:06:46:47 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
216.73.160.133 - - [27/Sep/2026:06:46:47 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-09-25 20:43:27
(1 month ago)
175 requests with url.path */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
๐ซ๐ท
Bruno
2026-09-22 17:59:56
(1 month ago)
216.73.160.133 - - [22/Sep/2026:19:59:51 +0200] "POST /wp-login.php HTTP/1.1" 200 12763 "https://edi ...
show more
216.73.160.133 - - [22/Sep/2026:19:59:51 +0200] "POST /wp-login.php HTTP/1.1" 200 12763 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36"
216.73.160.133 - - [22/Sep/2026:19:59:52 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Feditionsansouire.fr%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 9861 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36"
216.73.160.133 - - [22/Sep/2026:19:59:53 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Feditionsansouire.fr%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 9861 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36"
216.73.160.133 - - [22/Sep/2026:19:59:55 +0200] "POST /wp-login.php HTTP/1.1" 200 7909 "https://editionsa
...
show less
Web App Attack
๐บ๐ธ
Jason Howell
2026-09-22 15:37:01
(1 month ago)
216.73.160.133 - - [22/Sep/2026:10:36:11 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsg ...
show more
216.73.160.133 - - [22/Sep/2026:10:36:11 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7594 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:93.0) Gecko/20100101 Firefox/93.0"
216.73.160.133 - - [22/Sep/2026:10:36:12 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3600 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
216.73.160.133 - - [22/Sep/2026:10:36:13 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3600 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
216.73.160.133 - - [22/Sep/2026:10:36:15 -0500] "GET /wp-login.php?redirect_to=h
...
show less
Web App Attack
๐ซ๐ท
masterguru
2026-09-22 10:21:59
(1 month ago)
(wordpress) Apache: Failed WordPress login from 216.73.160.133 (US/United States/-): 10 in the last ...
show more
(wordpress) Apache: Failed WordPress login from 216.73.160.133 (US/United States/-): 10 in the last 3600 secs (0-193)
show less
Hacking
๐ฉ๐ช
palzer.IT
2026-09-07 10:46:39
(1 month ago)
Fail2ban automatic report for plesk-wordpress: 216.73.160.133 - - [07/Sep/2026:12:46:20 +0200] POST ...
show more
Fail2ban automatic report for plesk-wordpress: 216.73.160.133 - - [07/Sep/2026:12:46:20 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8959 [DOMAIN_REMOVED] Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36 216.73.160.133 - - [07/Sep/2026:12:46:22 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8953 [DOMAIN_REMOVED] Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/122.0 216.73.160.133 - - [07/Sep/2026:12:46:24 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8959 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 04:23:36
(1 month ago)
(wordpress) Failed wordpress login from 216.73.160.133 (US/United States/-)
Brute-Force
๐ช๐ธ
ofm-abuse
2026-09-05 19:37:41
(1 month ago)
Brute-force
...
Brute-Force
Web App Attack
Bad Web Bot