157.245.74.191

(wp_login_try) srv104 WordPress login brute force 157.245.74.191 (NL/The Netherlands/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:

Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.

Wordpress malicious attack:[octaflood]

Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.pro | URI: /wp-json/batch/v1 | UA: Moz ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.pro | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] show less

Scanning for exploits - /wp-json/batch/v1

crowdsecurity/http-cve-probing

(wordpress) Failed wordpress login from 157.245.74.191 (-)

Detected WordPress attack from different servers

Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.pro | URI: /wp-login.php | UA: Mozilla/5.0 | ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.pro | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request] show less

tcp/6931

tcp ports: 6931,1000 (2 or more attempts)

tcp/8089

denied traffic to a non-approved destination port. destination port 3000.

Illegitimate and/or suspicious requests.

Detected: TCP scan on port: 445 with flags: SYN