๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-27 04:47:53
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฉ๐ช
Blexyel
2026-09-27 04:46:41
(1 hour ago)
216.73.160.152 - - [27/Sep/2026:06:46:41 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
216.73.160.152 - - [27/Sep/2026:06:46:41 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-09-26 18:44:59
(11 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: app.astropot.store | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-09-25 19:29:40
(1 day ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ต๐ฑ
Budyn
2026-09-25 19:13:11
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.goblinpot.site | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-25 19:04:26
(1 day ago)
216.73.160.152 - - [25/Sep/2026:21:04:25 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
216.73.160.152 - - [25/Sep/2026:21:04:25 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 401 581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "disk-monitoring.pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
Bruno
2026-09-22 18:01:50
(4 days ago)
216.73.160.152 - - [22/Sep/2026:20:01:43 +0200] "POST /wp-login.php HTTP/1.1" 200 12768 "https://edi ...
show more
216.73.160.152 - - [22/Sep/2026:20:01:43 +0200] "POST /wp-login.php HTTP/1.1" 200 12768 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15"
216.73.160.152 - - [22/Sep/2026:20:01:44 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Feditionsansouire.fr%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 9861 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36"
216.73.160.152 - - [22/Sep/2026:20:01:46 +0200] "GET /wp-login.php?redirect_to=https%3A%2F%2Feditionsansouire.fr%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 9861 "https://editionsansouire.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36"
216.73.160.152 - - [22/Sep/2026:20:01:46 +0200] "POST /wp-login.php HTTP/1.1" 200 7915 "https://edi
...
show less
Web App Attack
๐บ๐ธ
Jason Howell
2026-09-22 15:40:13
(4 days ago)
216.73.160.152 - - [22/Sep/2026:10:35:42 -0500] "POST /wp-login.php HTTP/1.1" 200 5926 "https://devi ...
show more
216.73.160.152 - - [22/Sep/2026:10:35:42 -0500] "POST /wp-login.php HTTP/1.1" 200 5926 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:93.0) Gecko/20100101 Firefox/93.0"
216.73.160.152 - - [22/Sep/2026:10:35:42 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 476 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:90.0) Gecko/20100101 Firefox/90.0.1"
216.73.160.152 - - [22/Sep/2026:10:38:51 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fdevilsglenstorage.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7594 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
216.73.160.152 - - [22/Sep/2026:10:39:29 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 4470 "https://devilsglenstorage.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Saf
...
show less
Web App Attack
๐ฉ๐ช
palzer.IT
2026-09-07 10:40:19
(2 weeks ago)
Fail2ban automatic report for plesk-wordpress: 216.73.160.152 - - [07/Sep/2026:12:40:00 +0200] POST ...
show more
Fail2ban automatic report for plesk-wordpress: 216.73.160.152 - - [07/Sep/2026:12:40:00 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8955 [DOMAIN_REMOVED] Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/121.0 216.73.160.152 - - [07/Sep/2026:12:40:02 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8898 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.130 Safari/537.36 216.73.160.152 - - [07/Sep/2026:12:40:04 +0200] POST /wp-login.php [DOMAIN_REMOVED] 200 8953 [DOMAIN_REMOVED] Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/121.0
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
ofm-abuse
2026-09-05 19:42:54
(3 weeks ago)
Brute-force
...
Brute-Force
Web App Attack
Bad Web Bot
๐ฉ๐ช
Viveronese
2026-08-30 00:38:34
(4 weeks ago)
Wordpress vulnerability scanning
Web App Attack
๐น๐ท
neron
2026-08-12 21:06:48
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐น๐ท
neron
2026-08-11 00:29:21
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ฉ๐ช
abdubhai
2026-08-10 05:45:13
(1 month ago)
216.73.160.152 - - [10/Aug/2026:
...
Brute-Force
๐ฉ๐ช
FeG Deutschland
2026-08-09 20:27:45
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack