๐บ๐ธ
abuse-opdc
2026-10-09 03:45:58
(3 days ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
๐ฉ๐ช
Gwyneth Llewelyn
2026-10-09 02:38:28
(3 days ago)
104.248.166.35 - - [09/Oct/2026:03:38:26 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5. ...
show more
104.248.166.35 - - [09/Oct/2026:03:38:26 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5.0"
show less
Bad Web Bot
๐ต๐ฑ
Budyn
2026-10-08 18:25:01
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cloud.teddypot.tech | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฎ๐ช
RoboSOC
2026-10-08 17:53:49
(4 days ago)
WordPress Core author exclude SQL Injection Vulnerability, PTR: PTR record not found
Hacking
๐ฉ๐ช
ghostwarriors
2026-10-08 09:50:08
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-08 09:29:19
(4 days ago)
104.248.166.35 - - [08/Oct/2026:09:30:31 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5. ...
show more
104.248.166.35 - - [08/Oct/2026:09:30:31 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5.0"
104.248.166.35 - - [08/Oct/2026:09:30:31 +0200] "GET /wp-login.php HTTP/1.1" 404 4448 "-" "Mozilla/5.0"
104.248.166.35 - - [08/Oct/2026:11:29:16 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 551 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
104.248.166.35 - - [08/Oct/2026:11:29:16 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4497 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
104.248.166.35 - - [08/Oct/2026:11:29:16 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
104.248.166.35 - - [08/Oct/2026:11:29:16 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4496 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari
show less
Web App Attack
Hacking
๐ฌ๐ง
thetomtaylor.co.uk
2026-10-08 09:08:02
(4 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-08 08:10:03
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ช๐ธ
masterguru
2026-10-08 08:05:40
(4 days ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-08 08:05:01
(4 days ago)
[ti-24al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-24al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 104.248.166.35 - - [08/Oct/2026:10:01:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9321 "-" "Mozilla/5.0"
104.248.166.35 - - [08/Oct/2026:10:02:23 +0200] "POST /wp-login.php HTTP/1.1" 403 2615 "-" "Mozilla/5.0"
104.248.166.35 - - [08/Oct/2026:10:03:28 +0200] "POST /wp-login.php HTTP/1.1" 403 2519 "-" "Mozilla/5.0"
104.248.166.35 - - [08/Oct/2026:10:04:43 +0200] "POST /wp-login.php HTTP/1.1" 403 2519 "-" "Mozilla/5.0"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-10-08 07:37:16
(4 days ago)
104.248.166.35 - - [08/Oct/2026:08:37:14 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5. ...
show more
104.248.166.35 - - [08/Oct/2026:08:37:14 +0100] "GET /wp-login.php HTTP/2.0" 404 994 "-" "Mozilla/5.0"
show less
Bad Web Bot
๐ต๐ฑ
Budyn
2026-10-08 07:29:53
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: beta.astropot.online | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
MPL
2026-06-26 02:17:58
(3 months ago)
tcp/1224 (2 or more attempts)
Port Scan
๐ณ๐ฑ
EGP Abuse Dept
2026-06-26 02:09:03
(3 months ago)
Unauthorized connection to proxy port 8080
Port Scan
Hacking
๐ฌ๐ง
PeravixGroup
2026-06-26 01:41:46
(3 months ago)
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ...
show more
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud
show less
Brute-Force
Hacking