Anonymous
2026-10-16 10:28:07
(4 days ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show more
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Web App Attack
Bad Web Bot
๐ง๐ท
ICS Labs
2026-10-14 15:19:58
(6 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-14 UTC.
Brute-Force
๐ฉ๐ช
ghostwarriors
2026-10-14 10:50:12
(6 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-14 10:38:12
(6 days ago)
164.90.173.178 - - [14/Oct/2026:04:29:52 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5. ...
show more
164.90.173.178 - - [14/Oct/2026:04:29:52 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5.0"
164.90.173.178 - - [14/Oct/2026:04:29:52 +0200] "GET /wp-login.php HTTP/1.1" 404 4389 "-" "Mozilla/5.0"
164.90.173.178 - - [14/Oct/2026:12:38:08 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 551 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
164.90.173.178 - - [14/Oct/2026:12:38:08 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4438 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
164.90.173.178 - - [14/Oct/2026:12:38:08 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
164.90.173.178 - - [14/Oct/2026:12:38:08 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4437 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari
show less
Web App Attack
Hacking
๐ต๐ฑ
Budyn
2026-10-14 10:34:51
(6 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.astropot.store | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-14 02:55:17
(6 days ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-201)
Hacking
๐ซ๐ท
Kenshin869
2026-10-14 02:51:30
(6 days ago)
Wordpress unauthorized access attempt
Brute-Force
๐บ๐ธ
mawan
2026-10-14 02:27:33
(6 days ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ต๐ฑ
Budyn
2026-10-14 02:19:00
(6 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.budyn.xyz | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฎ๐ฑ
spd.co.il
2026-10-14 02:02:08
(6 days ago)
Port scan detected on multiple ports
Port Scan
๐จ๐ฟ
lp
2026-10-12 23:56:07
(1 week ago)
anomaly: udp_src_session, 2201 > threshold 2200, repeats 5860 times
Port Scan
๐ธ๐ฐ
GOVCERT
2026-10-12 23:20:23
(1 week ago)
Excessive Firewall Denies
DDoS Attack
Web Spam
๐ซ๐ท
security.rdmc.fr
2026-10-12 03:49:13
(1 week ago)
Port Scan Attack proto:TCP src:57726 dst:5061
Port Scan
Anonymous
2026-10-11 20:57:14
(1 week ago)
164.90.173.178 - - [11/Oct/2026:22:56:49 +0200] "GET /http:%2f%2fa%0apizza:pizza=pizza HTTP/1.1" 404 ...
show more
164.90.173.178 - - [11/Oct/2026:22:56:49 +0200] "GET /http:%2f%2fa%0apizza:pizza=pizza HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:56:50 +0200] "GET //%0d%0apizza:pizza=pizza/%2F%2e%2e HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:56:50 +0200] "GET /c/%2f%2e%2e%0d%0apizza:pizza=pizza HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:56:57 +0200] "GET /static%2f..%2f%3f%0apizza:pizza=pizza HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:57:05 +0200] "GET /fonts/%2f%0apizza:pizza=pizza.ttf HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:57:11 +0200] "GET /%23%2f%0apizza:pizza=pizza HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:57:12 +0200] "GET /%2f%5c%0d%0apizza:pizza=pizza/wp-admin HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:57:12 +0200] "GET /%2f%2f%3f%0d%0apizza:pizza=pizza HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:22:57:12 +0200] "GET /https:%2f%2f%0d%0apizza:pizza=pizza HTTP/1.1" 404 2103
164.90.173.178 - - [11/Oct/2026:2
...
show less
Web Spam
Web App Attack
๐ฉ๐ช
Packets-Decreaser.NET
2025-12-13 08:03:57
(10 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam