๐ต๐ฑ
Budyn
2026-09-26 06:04:30
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.teddypot.site | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-26 05:27:12
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
Anonymous
2026-09-25 20:08:15
(1 day ago)
155.2.215.54 - - [25/Sep/2026:20:08:14 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 503 5350 " ...
show more
155.2.215.54 - - [25/Sep/2026:20:08:14 +0000] "GET /wp-includes/ID3/license.txt HTTP/1.1" 503 5350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-25 18:59:22
(1 day ago)
155.2.215.54 - - [25/Sep/2026:20:59:22 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 301 ...
show more
155.2.215.54 - - [25/Sep/2026:20:59:22 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 301 68 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "ntfy.pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐ง๐ท
Halux
2026-09-25 18:44:29
(1 day ago)
155.2.215.54 Web Application Firewall multiple violations
Hacking
Web App Attack
๐ต๐ฑ
Budyn
2026-09-25 15:09:12
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.astropot.space | URI: //xmlrpc.php?rsd | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-25 15:05:50
(1 day ago)
[ti-05al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-05al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 155.2.215.54 - - [25/Sep/2026:17:02:26 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
155.2.215.54 - - [25/Sep/2026:17:03:01 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
155.2.215.54 - - [25/Sep/2026:17:04:06 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
155.2.215.54 - - [25/Sep/2026:17:05:47 +0200] "POST //xmlrpc.php HTTP/1.1" 200 4416 "-" "Mozilla/5.0 (Win
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
technojoe99
2026-09-25 14:52:51
(1 day ago)
Exploit scan from 155.2.215.54. GET /wp-includes/ID3/license.txt HTTP/1.1.
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-21 03:08:34
(6 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฆ๐บ
HJ5Ss4Ju
2026-09-19 09:10:09
(1 week ago)
Blocked by Wordfence (SID 6)
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-17 12:02:57
(1 week ago)
[ti-10al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpr ...
show more
[ti-10al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 155.2.215.54 - - [17/Sep/2026:14:01:22 +0200] "POST /wp-login.php HTTP/1.1" 301 6293 "https://baanagency.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36"
155.2.215.54 - - [17/Sep/2026:14:02:14 +0200] "POST /wp-login.php HTTP/1.1" 301 6309 "https://baanagency.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36"
155.2.215.54 - - [17/Sep/2026:14:02:26 +0200] "POST /wp-login.php HTTP/1.1" 301 6309 "https://baanagency.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
155.2.215.54 - - [17/Sep/2026:14:02:43 +0200] "PO
...
show less
Brute-Force
Web App Attack
๐ง๐ช
taivas.nl
2026-09-17 04:32:32
(1 week ago)
Many_bad_calls
Web App Attack
๐ฌ๐ง
BRHosting
2026-09-17 03:06:04
(1 week ago)
Wordpress brute force attack for login credentials (eg xmlrc.php or wp-login.php)
Brute-Force
Web App Attack
๐ฌ๐ง
Comberton
2026-09-16 23:50:11
(1 week ago)
Ban via by F2B interproj-org-access jail
Brute-Force
๐ง๐ช
taivas.nl
2026-09-16 13:02:16
(1 week ago)
Bad_requests
Bad Web Bot