🇩🇪
schuerholz
2026-11-06 13:41:29
UTC ·
(4 hours ago)
Confirmed intrusion/exploit attempt detected and blocked by IPS (automated detection).
Hacking
Web App Attack
🇺🇸
WPJoe
2026-11-06 12:44:22
UTC ·
(5 hours ago)
165.232.45.63 - - [06/Nov/2026:12:38:56 +0000] "POST /wp-login.php HTTP/1.1" 200 12218 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:12:38:56 +0000] "POST /wp-login.php HTTP/1.1" 200 12225 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:12:38:56 ...
show more
165.232.45.63 - - [06/Nov/2026:12:38:56 +0000] "POST /wp-login.php HTTP/1.1" 200 12218 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:12:38:56 +0000] "POST /wp-login.php HTTP/1.1" 200 12225 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:12:38:56 +0000] "POST /wp-login.php HTTP/1.1" 200 12232 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:12:44:21 +0000] "POST /wp-login.php HTTP/1.1" 200 12219 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:12:44:21 +0000] "POST /wp-login.php HTTP/1.1" 200 12226 "-" "Mozilla/5.0"
...
show less
Web App Attack
Brute-Force
🇺🇸
WPJoe
2026-11-06 11:37:29
UTC ·
(6 hours ago)
165.232.45.63 - - [06/Nov/2026:11:32:41 +0000] "POST /wp-login.php HTTP/1.1" 200 12233 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:11:32:41 +0000] "POST /wp-login.php HTTP/1.1" 200 12219 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:11:32:41 ...
show more
165.232.45.63 - - [06/Nov/2026:11:32:41 +0000] "POST /wp-login.php HTTP/1.1" 200 12233 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:11:32:41 +0000] "POST /wp-login.php HTTP/1.1" 200 12219 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:11:32:41 +0000] "POST /wp-login.php HTTP/1.1" 200 12225 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:11:37:28 +0000] "POST /wp-login.php HTTP/1.1" 200 8647 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:11:37:28 +0000] "POST /wp-login.php HTTP/1.1" 200 8653 "-" "Mozilla/5.0"
...
show less
Web App Attack
Brute-Force
🇺🇸
WPJoe
2026-11-06 10:31:07
UTC ·
(7 hours ago)
165.232.45.63 - - [06/Nov/2026:10:26:40 +0000] "POST /wp-login.php HTTP/1.1" 200 12220 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:10:26:40 +0000] "POST /wp-login.php HTTP/1.1" 200 12225 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:10:26:40 ...
show more
165.232.45.63 - - [06/Nov/2026:10:26:40 +0000] "POST /wp-login.php HTTP/1.1" 200 12220 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:10:26:40 +0000] "POST /wp-login.php HTTP/1.1" 200 12225 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:10:26:40 +0000] "POST /wp-login.php HTTP/1.1" 200 12231 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:10:31:06 +0000] "POST /wp-login.php HTTP/1.1" 200 12219 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:10:31:06 +0000] "POST /wp-login.php HTTP/1.1" 200 12226 "-" "Mozilla/5.0"
...
show less
Web App Attack
Brute-Force
🇵🇱
Budyn
2026-11-06 10:03:14
UTC ·
(8 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: Unknown Bot / General Web Recon | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: ssh.astropot.tech | Path: /wp-json/batch/v1 | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWe ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Unknown Bot / General Web Recon | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: ssh.astropot.tech | Path: /wp-json/batch/v1 | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
WPJoe
2026-11-06 09:25:38
UTC ·
(8 hours ago)
165.232.45.63 - - [06/Nov/2026:09:21:26 +0000] "POST /wp-login.php HTTP/1.1" 200 12218 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:09:21:26 +0000] "POST /wp-login.php HTTP/1.1" 200 8653 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:09:21:26 + ...
show more
165.232.45.63 - - [06/Nov/2026:09:21:26 +0000] "POST /wp-login.php HTTP/1.1" 200 12218 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:09:21:26 +0000] "POST /wp-login.php HTTP/1.1" 200 8653 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:09:21:26 +0000] "POST /wp-login.php HTTP/1.1" 200 8660 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:09:25:38 +0000] "POST /wp-login.php HTTP/1.1" 200 12219 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:09:25:38 +0000] "POST /wp-login.php HTTP/1.1" 200 12225 "-" "Mozilla/5.0"
...
show less
Web App Attack
Brute-Force
🇺🇸
WPJoe
2026-11-06 08:17:46
UTC ·
(9 hours ago)
165.232.45.63 - - [06/Nov/2026:08:16:39 +0000] "POST /wp-login.php HTTP/1.1" 200 12219 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:08:16:39 +0000] "POST /wp-login.php HTTP/1.1" 200 12231 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:08:16:39 ...
show more
165.232.45.63 - - [06/Nov/2026:08:16:39 +0000] "POST /wp-login.php HTTP/1.1" 200 12219 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:08:16:39 +0000] "POST /wp-login.php HTTP/1.1" 200 12231 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:08:16:39 +0000] "POST /wp-login.php HTTP/1.1" 200 12224 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:08:17:45 +0000] "POST /wp-login.php HTTP/1.1" 200 8609 "-" "Mozilla/5.0"
165.232.45.63 - - [06/Nov/2026:08:17:45 +0000] "POST /wp-login.php HTTP/1.1" 200 8603 "-" "Mozilla/5.0"
...
show less
Web App Attack
Brute-Force
🇺🇸
RonnieGas
2026-11-06 08:15:54
UTC ·
(9 hours ago)
Repeated WordPress login probe requests against a platform that does not run WordPress. Truncated or generic user-agent string.
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-11-06 08:00:40
UTC ·
(10 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: sql.definitelynotahoneypot.online | Path: /wp-login.php | User-Agent: Mozilla/5.0 | Request: [Empty / GE ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: sql.definitelynotahoneypot.online | Path: /wp-login.php | User-Agent: Mozilla/5.0 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-06 07:57:36
UTC ·
(10 hours ago)
WordPress attack-tool calls | method: GET | path: /wp-login.php | ua: Mozilla/5.0
Web App Attack
Hacking
🇦🇺
LiftUp Hosting
2026-11-06 01:16:16
UTC ·
(16 hours ago)
Honeypot hit: HTTP/1.1 request on 2443
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: ...
show more
Honeypot hit: HTTP/1.1 request on 2443
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate; 2443 [2] TCP
show less
Hacking
Bad Web Bot
Anonymous
2026-11-06 00:45:38
UTC ·
(17 hours ago)
denied traffic to a honeypot network. destination port 15000.
Port Scan
Hacking