🇵🇱
Budyn
2026-08-27 17:20:46
UTC ·
(2 months ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.definitelynotahoneypot.top | URI: //xmlrpc.php?rsd | UA: ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.definitelynotahoneypot.top | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-08-27 17:20:08
UTC ·
(2 months ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇬🇧
Artelis
2026-08-27 17:17:19
UTC ·
(2 months ago)
34.23.178.89 - - [27/Aug/2026:17:17:17 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026: ...
show more
34.23.178.89 - - [27/Aug/2026:17:17:17 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:17:17:17 +0000] "GET //feed/ HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:17:17:17 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:17:17:17 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:17:17:18 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
...
show less
Web App Attack
🇺🇸
ANTI SCANNER
2026-08-27 17:10:09
UTC ·
(2 months ago)
Scanner : //xmlrpc.php?rsd
Web Spam
Anonymous
2026-08-27 17:07:01
UTC ·
(2 months ago)
Bot / scanning and/or hacking attempts: POST //xmlrpc.php HTTP/1.1
Hacking
Web App Attack
🇫🇷
Pays d'Angoulême
2026-08-27 17:03:40
UTC ·
(2 months ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-includes/id3/license.txt/feed
Web App Attack
🇩🇪
yitzhaq
2026-08-27 17:00:00
UTC ·
(2 months ago)
34.23.178.89 - - [27/Aug/2026:18:59:57 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/ ...
show more
34.23.178.89 - - [27/Aug/2026:18:59:57 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:18:59:57 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:18:59:57 +0200] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:18:59:57 +0200] "GET //wp/wp-includes/wlwmanifest.xml HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.23.178.89 - - [27/Aug/2026:18:59:56 +0200] "GET / HTTP/1.1" 301 545 "-" "Mozilla/5.0 (Windows N
show less
Web App Attack
Hacking
🇩🇪
FeG Deutschland
2026-08-27 16:50:53
UTC ·
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
🇧🇷
dominioz
2026-08-27 16:45:55
UTC ·
(2 months ago)
2026-08-27 16:45:45 GET /wp-includes/ID3/license.txt - - 34.23.178.89 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 1987
2026-08-27 16:45:45 GET /feed/ - - 34.23.178. ...
show more
2026-08-27 16:45:45 GET /wp-includes/ID3/license.txt - - 34.23.178.89 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 1987
2026-08-27 16:45:45 GET /feed/ - - 34.23.178.89 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 1987
2026-08-27 16:45:46 GET /xmlrpc.php rsd - 34.23.178.89 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 5137
2026-08-27 16:45:46 GET /blog/wp-includes/wlwmanifest.xml - - 34.23.178.89 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/95.0.4638.69+Safari/537.36 - 404 1987
...
show less
Web App Attack
🇷🇺
DZBOT
2026-08-27 16:44:55
UTC ·
(2 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇦🇺
2000cn.com.au
2026-08-27 16:43:21
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
Melle
2026-08-27 16:43:10
UTC ·
(2 months ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-probing | 34.23.178.89 triggered 11 events | Detected: 2026-08-27T16:43:07.601349107Z
Web App Attack
Hacking
🇩🇪
patrisei
2026-08-27 16:42:49
UTC ·
(2 months ago)
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing
Port Scan
Web App Attack
🇨🇭
zynex
2026-08-27 16:37:26
UTC ·
(2 months ago)
URL Probing: /wp1/wp-includes/wlwmanifest.xml
Web App Attack
🇮🇹
VHosting
2026-08-27 16:35:03
UTC ·
(2 months ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack