🇸🇪
vaia.cloud
2026-10-22 13:45:01
(20 hours ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-22 12:24:56
(21 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.teddypot.pro | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"139.59.145.122","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e87b57acd66dc1-FRA","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"139.59.145.122"}
show less
Bad Web Bot
Web App Attack
2026-10-22 09:52:14
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
Petros Stefanakis
2026-10-22 09:34:07
(1 day ago)
(wordpress,mod_security) Login failure/trigger from 139.59.145.122 (DE/Germany/-)
SQL Injection
Brute-Force
🇩🇪
abdubhai
2026-10-22 09:00:30
(1 day ago)
139.59.145.122 - - [22/Oct/2026:
...
Brute-Force
🇩🇪
Blexyel
2026-10-22 08:52:31
(1 day ago)
139.59.145.122 - - [22/Oct/2026:10:52:30 +0200] "GET /wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5. ...
show more
139.59.145.122 - - [22/Oct/2026:10:52:30 +0200] "GET /wp-login.php HTTP/1.1" 404 146 "-" "Mozilla/5.0"
...
show less
Brute-Force
Web App Attack
🇩🇪
pltcldvlpr
2026-10-22 08:47:30
(1 day ago)
CMS/framework probe: 139.59.145.122 - - [22/Oct/2026:10:47:29 +0200] "GET /wp-login.php HTTP/1.1" 30 ...
show more
CMS/framework probe: 139.59.145.122 - - [22/Oct/2026:10:47:29 +0200] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0" asn=14061 org="DigitalOcean, LLC" country=DE
...
show less
Web App Attack
🇵🇱
Budyn
2026-10-22 08:45:14
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.teddypot.pro | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"139.59.145.122","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e7398349773655-FRA","Connection":"Keep-Alive","Accept":"*\/*","Accept-Encoding":"gzip, br","X-Forwarded-For":"139.59.145.122"}
show less
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-05-14 08:00:43
(5 months ago)
tcp/5555
Port Scan
🇺🇸
MPL
2026-05-14 07:05:04
(5 months ago)
tcp ports: 8443,11000 (2 or more attempts)
Port Scan
🇺🇸
MPL
2026-05-14 06:19:00
(5 months ago)
tcp/2000
Port Scan
🇺🇸
MPL
2026-04-15 07:52:47
(6 months ago)
tcp/8888
Port Scan
🇮🇹
Fusty
2026-04-15 07:40:35
(6 months ago)
Unauthorized attempt on (TCP on port 8088).
Source port: 61009
TTL: 245
Packet length: 44
Timestamp: ...
show more
Unauthorized attempt on (TCP on port 8088).
Source port: 61009
TTL: 245
Packet length: 44
Timestamp: 2026-04-15 09:40:34
show less
Port Scan
🇺🇸
cazae
2026-04-15 07:16:29
(6 months ago)
Unauthorized attempt on debian [8088/tcp]
Source port: 61015
TTL: 240
Packet length: 44
TOS: 0x08
h ...
show more
Unauthorized attempt on debian [8088/tcp]
Source port: 61015
TTL: 240
Packet length: 44
TOS: 0x08
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
masterguru
2026-04-15 07:10:26
(6 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 139.59.145.122 (DE/Germany/-): 2 in t ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 139.59.145.122 (DE/Germany/-): 2 in the last 3600 secs (0-196)
show less
Hacking