🇱🇻
GooddayGroup
2026-11-10 00:11:07
UTC ·
(3 days ago)
Automated probing for sensitive configuration files and environment leaks.
Hacking
Brute-Force
🇧🇷
ICS Labs
2026-11-09 20:08:21
UTC ·
(4 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
Brute-Force
🇩🇪
maxpower
2026-11-09 12:43:15
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:13:23:41 +0100] "POST /wp-login.php HTTP/1.1" 200 11986 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:13:23:41 +0100] "POST /wp-login.php HTTP/1.1" 200 11986 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:28:32 +0100] "POST /wp-login.php HTTP/1.1" 200 12017 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:33:24 +0100] "POST /wp-login.php HTTP/1.1" 200 12067 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:38:15 +0100] "POST /wp-login.php HTTP/1.1" 200 12066 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:43:13 +0100] "POST /wp-login.php HTTP/1.1" 200 11964 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇩🇪
maxpower
2026-11-09 12:19:01
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:13:00:02 +0100] "POST /wp-login.php HTTP/1.1" 200 12076 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:13:00:02 +0100] "POST /wp-login.php HTTP/1.1" 200 12076 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:04:42 +0100] "POST /wp-login.php HTTP/1.1" 200 11982 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:09:25 +0100] "POST /wp-login.php HTTP/1.1" 200 12056 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:14:11 +0100] "POST /wp-login.php HTTP/1.1" 200 12128 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:13:18:55 +0100] "POST /wp-login.php HTTP/1.1" 200 11981 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇩🇪
maxpower
2026-11-09 11:32:37
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:12:13:56 +0100] "POST /wp-login.php HTTP/1.1" 200 12022 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:12:13:56 +0100] "POST /wp-login.php HTTP/1.1" 200 12022 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:12:18:37 +0100] "POST /wp-login.php HTTP/1.1" 200 11997 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:12:23:16 +0100] "POST /wp-login.php HTTP/1.1" 200 12053 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:12:27:54 +0100] "POST /wp-login.php HTTP/1.1" 200 11920 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:12:32:32 +0100] "POST /wp-login.php HTTP/1.1" 200 12042 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇵🇱
Budyn
2026-11-09 11:23:26
UTC ·
(4 days ago)
[Budyn Honeypot Sinkhole] | Attack type: Unknown Bot / General Web Recon | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.teddypot.website | Path: /wp-json/batch/v1 | User-Agent: Mozilla/5.0 (X11; Linux x86_64) A ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Unknown Bot / General Web Recon | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: gitlab.teddypot.website | Path: /wp-json/batch/v1 | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-09 11:09:25
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:11:51:12 +0100] "POST /wp-login.php HTTP/1.1" 200 12012 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:11:51:12 +0100] "POST /wp-login.php HTTP/1.1" 200 12012 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:55:40 +0100] "POST /wp-login.php HTTP/1.1" 200 12053 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:12:00:11 +0100] "POST /wp-login.php HTTP/1.1" 200 11955 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:12:04:46 +0100] "POST /wp-login.php HTTP/1.1" 200 12000 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:12:09:19 +0100] "POST /wp-login.php HTTP/1.1" 200 12048 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇩🇪
maxpower
2026-11-09 10:46:43
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:11:28:53 +0100] "POST /wp-login.php HTTP/1.1" 200 12043 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:11:28:53 +0100] "POST /wp-login.php HTTP/1.1" 200 12043 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:33:22 +0100] "POST /wp-login.php HTTP/1.1" 200 11978 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:37:45 +0100] "POST /wp-login.php HTTP/1.1" 200 11921 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:42:09 +0100] "POST /wp-login.php HTTP/1.1" 200 12078 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:46:41 +0100] "POST /wp-login.php HTTP/1.1" 200 11975 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇩🇪
maxpower
2026-11-09 10:24:30
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:11:07:33 +0100] "POST /wp-login.php HTTP/1.1" 200 12063 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:11:07:33 +0100] "POST /wp-login.php HTTP/1.1" 200 12063 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:11:39 +0100] "POST /wp-login.php HTTP/1.1" 200 12022 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:15:44 +0100] "POST /wp-login.php HTTP/1.1" 200 11991 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:19:55 +0100] "POST /wp-login.php HTTP/1.1" 200 12037 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:11:24:25 +0100] "POST /wp-login.php HTTP/1.1" 200 12057 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇩🇪
ghostwarriors
2026-11-09 10:20:25
UTC ·
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-11-09 10:10:26
UTC ·
(4 days ago)
165.232.107.52 - - [09/Nov/2026:07:59:29 +0100] "GET /wp-login.php HTTP/1.1" 301 614 "-" "Mozilla/5.0"
165.232.107.52 - - [09/Nov/2026:07:59:29 +0100] "GET /wp-login.php HTTP/1.1" 404 4432 "-" "Mozilla/5.0"
165.232.107.52 - - [09/Nov/2026:11:10:23 +0 ...
show more
165.232.107.52 - - [09/Nov/2026:07:59:29 +0100] "GET /wp-login.php HTTP/1.1" 301 614 "-" "Mozilla/5.0"
165.232.107.52 - - [09/Nov/2026:07:59:29 +0100] "GET /wp-login.php HTTP/1.1" 404 4432 "-" "Mozilla/5.0"
165.232.107.52 - - [09/Nov/2026:11:10:23 +0100] "POST /wp-json/batch/v1 HTTP/1.1" 301 584 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
165.232.107.52 - - [09/Nov/2026:11:10:23 +0100] "GET /wp-json/batch/v1 HTTP/1.1" 403 4491 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
165.232.107.52 - - [09/Nov/2026:11:10:23 +0100] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 594 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
165.232.107.52 - - [09/Nov/2026:11:10:23 +0100] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4491 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari
show less
Web App Attack
Hacking
🇩🇪
maxpower
2026-11-09 09:43:09
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:10:26:54 +0100] "POST /wp-login.php HTTP/1.1" 200 12092 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:10:26:54 +0100] "POST /wp-login.php HTTP/1.1" 200 12092 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:30:53 +0100] "POST /wp-login.php HTTP/1.1" 200 12002 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:34:57 +0100] "POST /wp-login.php HTTP/1.1" 200 12032 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:38:59 +0100] "POST /wp-login.php HTTP/1.1" 200 11981 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:43:03 +0100] "POST /wp-login.php HTTP/1.1" 200 12038 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇨🇭
Origon
2026-11-09 09:42:41
UTC ·
(4 days ago)
http-cve-probing - IP: 165.232.107.52 - time="2026-11-09T10:42:41+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 165.232.107.52 (GB/14061) : 4h ban on Ip 165.232.107.52" module ...
show more
http-cve-probing - IP: 165.232.107.52 - time="2026-11-09T10:42:41+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 165.232.107.52 (GB/14061) : 4h ban on Ip 165.232.107.52" module=db
show less
Web App Attack
🇩🇪
maxpower
2026-11-09 09:22:54
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:10:06:38 +0100] "POST /wp-login.php HTTP/1.1" 200 11950 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:10:06:38 +0100] "POST /wp-login.php HTTP/1.1" 200 11950 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:10:42 +0100] "POST /wp-login.php HTTP/1.1" 200 12073 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:14:46 +0100] "POST /wp-login.php HTTP/1.1" 200 12098 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:18:47 +0100] "POST /wp-login.php HTTP/1.1" 200 12033 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:22:51 +0100] "POST /wp-login.php HTTP/1.1" 200 12057 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan
🇩🇪
maxpower
2026-11-09 09:02:36
UTC ·
(4 days ago)
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:09:46:41 +0100] "POST /wp-login.php HTTP/1.1" 200 12002 ...
show more
(wp_login) REGOLA 1 - WP Login Attack 165.232.107.52 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 165.232.107.52 - - [09/Nov/2026:09:46:41 +0100] "POST /wp-login.php HTTP/1.1" 200 12002 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:09:50:37 +0100] "POST /wp-login.php HTTP/1.1" 200 12012 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:09:54:35 +0100] "POST /wp-login.php HTTP/1.1" 200 12053 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:09:58:34 +0100] "POST /wp-login.php HTTP/1.1" 200 12073 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
165.232.107.52 - - [09/Nov/2026:10:02:34 +0100] "POST /wp-login.php HTTP/1.1" 200 12032 "-" "Mozilla/5.0" "-" host=gadget.circuitografico.it
show less
Port Scan