🇧🇷
Peregrine
2026-04-18 03:10:52
UTC ·
(6 months ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.16.28.40 172.70.179.45 - - [15/Apr/2026:22:29:14 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 414
Bad Web Bot
🇧🇷
Peregrine
2026-04-17 03:10:43
UTC ·
(6 months ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.16.28.40 172.70.179.45 - - [15/Apr/2026:22:29:14 -0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 414
Bad Web Bot
🇫🇷
SpaceHost-Server
2026-04-16 22:29:21
UTC ·
(6 months ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-04-16 22:09:05
UTC ·
(6 months ago)
2026/04/16 22:09:03 [error] 792811#792811: *156790483 access forbidden by rule, client: 34.16.28.40, server: binixo.com.ua, request: "GET //wp-includes/ID3/license.txt HTTP/1.1", host: "binixo.com.ua"
2026/04/16 22:09:03 [error] 792811#792811: *15679 ...
show more
2026/04/16 22:09:03 [error] 792811#792811: *156790483 access forbidden by rule, client: 34.16.28.40, server: binixo.com.ua, request: "GET //wp-includes/ID3/license.txt HTTP/1.1", host: "binixo.com.ua"
2026/04/16 22:09:03 [error] 792811#792811: *156790483 access forbidden by rule, client: 34.16.28.40, server: binixo.com.ua, request: "GET //xmlrpc.php?rsd HTTP/1.1", host: "binixo.com.ua"
2026/04/16 22:09:03 [error] 792811#792811: *156790483 access forbidden by rule, client: 34.16.28.40, server: binixo.com.ua, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "binixo.com.ua"
...
show less
Web App Attack
Anonymous
2026-04-16 21:29:57
UTC ·
(6 months ago)
Web App Attack
🇺🇦
URAN Publishing Service
2026-04-16 20:41:20
UTC ·
(6 months ago)
34.16.28.40 - - [16/Apr/2026:23:41:16 +0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 3149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.16.28.40 - - [16/Apr/2026:2 ...
show more
34.16.28.40 - - [16/Apr/2026:23:41:16 +0300] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 3149 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.16.28.40 - - [16/Apr/2026:23:41:18 +0300] "GET //xmlrpc.php?rsd HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-04-16 20:02:03
UTC ·
(6 months ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/id3/license.txt/feed
Web App Attack
Anonymous
2026-04-16 18:02:57
UTC ·
(6 months ago)
XSS Attempt
Hacking
Anonymous
2026-04-16 17:45:52
UTC ·
(6 months ago)
34.16.28.40 - - [16/Apr/2026:19:45:51 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.0" 404 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.16.28.40 - - [16/Apr/2026:19 ...
show more
34.16.28.40 - - [16/Apr/2026:19:45:51 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.0" 404 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.16.28.40 - - [16/Apr/2026:19:45:51 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.16.28.40 - - [16/Apr/2026:19:45:51 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.16.28.40 - - [16/Apr/2026:19:45:51 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.16.28.40 - - [16/Apr/2026:19:45:51 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.0" 404 451 "-" "Mozilla
...
show less
Brute-Force
Web App Attack
🇫🇷
votrewebfacile
2026-04-16 16:30:42
UTC ·
(6 months ago)
xmlrpc abuse
Brute-Force
🇳🇱
Savvii
2026-04-16 16:15:43
UTC ·
(6 months ago)
11 attempts against mh-misc-ban on plum
Web App Attack
🇨🇿
ptlab
2026-04-16 14:45:55
UTC ·
(6 months ago)
Detected wp_login attack from WP-host.
Hacking
Web App Attack
🇩🇪
macrob
2026-04-16 13:31:24
UTC ·
(6 months ago)
2026/04/16 13:31:21 [error] 729497#729497: *155931936 access forbidden by rule, client: 34.16.28.40, server: finami.ph, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "finami.ph"
2026/04/16 13:31:21 [error] 729497#729497: *155931943 acc ...
show more
2026/04/16 13:31:21 [error] 729497#729497: *155931936 access forbidden by rule, client: 34.16.28.40, server: finami.ph, request: "GET //wp-includes/ID3/license.txt HTTP/2.0", host: "finami.ph"
2026/04/16 13:31:21 [error] 729497#729497: *155931943 access forbidden by rule, client: 34.16.28.40, server: finami.ph, request: "GET //xmlrpc.php?rsd HTTP/2.0", host: "finami.ph"
2026/04/16 13:31:21 [error] 729497#729497: *155928664 access forbidden by rule, client: 34.16.28.40, server: finami.ph, request: "GET //blog/wp-includes/wlwmanifest.xml HTTP/2.0", host: "finami.ph"
...
show less
Web App Attack
🇳🇱
Savvii
2026-04-16 12:50:50
UTC ·
(6 months ago)
10 attempts against mh-misc-ban on bean
Web App Attack
🇩🇪
Savvii
2026-04-16 11:17:14
UTC ·
(6 months ago)
10 attempts against mh-misc-ban on bush
Web App Attack