๐ฎ๐น
CoreTech srl
2026-10-27 11:58:56
(20 hours ago)
cloudlinux2 fail2ban: 2026-10-27 12:54:18,348 fail2ban.filter [1596]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-27 12:54:18,348 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 136.112.45.198 - 2026-10-27 12:54:18cloudlinux2 fail2ban: 2026-10-27 12:54:14,321 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 34.68.223.8 - 2026-10-27 12:54:13cloudlinux2 fail2ban: 2026-10-27 12:54:21,801 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 136.112.45.198 - 2026-10-27 12:54:21cloudlinux2 fail2ban: 2026-10-27 12:54:32,498 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 161.35.154.90 - 2026-10-27 12:54:32cloudlinux2 fail2ban: 2026-10-27 12:55:23,136 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 167.99.173.129 - 2026-10-27 12:55:22cloudlinux2 fail2ban: 2026-10-27 12:56:25,095 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 105.157.224.57 - 2026-10-27 12:56:24cloudlinux2 fail2ban: 2026-10-27 12:56:22,165 fail2ban.actions [1596]: NOTICE [plesk-modsecurity] Unban 35.245.143.238cloudlinux2 fail2b
show less
Web App Attack
๐ต๐ฑ
Budyn
2026-10-27 11:37:52
(20 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ldap.goblinpot.website | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"167.99.173.129","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5116943aa3aad81-SJC","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"167.99.173.129"}
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
Dunham Support
2026-10-27 11:04:21
(20 hours ago)
(wordpress) Failed wordpress login from 167.99.173.129 (US/United States/-)
Brute-Force
๐ต๐ฑ
miriks
2026-10-27 10:56:37
(21 hours ago)
Automated scan detected: GET /wp-json/batch/v1 โ UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537 ...
show more
Automated scan detected: GET /wp-json/batch/v1 โ UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
show less
Port Scan
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-27 10:49:28
(21 hours ago)
cloudlinux2 fail2ban: 2026-10-27 11:28:58,388 fail2ban.filter [1596]: INFO [recidive] Fou ...
show more
cloudlinux2 fail2ban: 2026-10-27 11:28:58,388 fail2ban.filter [1596]: INFO [recidive] Found 167.99.173.129 - 2026-10-27 11:28:58cloudlinux2 fail2ban: 2026-10-27 11:28:58,276 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 167.99.173.129 - 2026-10-27 11:28:57cloudlinux2 fail2ban: 2026-10-27 11:28:58,381 fail2ban.actions [1596]: NOTICE [plesk-wordpress] Ban 167.99.173.129cloudlinux2 fail2ban: 2026-10-27 11:28:58,276 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 167.99.173.129 - 2026-10-27 11:28:57cloudlinux2 fail2ban: 2026-10-27 11:28:58,388 fail2ban.filter [1596]: INFO [recidive] Found 167.99.173.129 - 2026-10-27 11:28:58cloudlinux2 fail2ban: 2026-10-27 11:28:58,381 fail2ban.actions [1596]: NOTICE [plesk-wordpress] Ban 167.99.173.129cloudlinux2 fail2ban: 2026-10-27 11:29:11,618 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 94.49.37.135 - 2026-10-27 11:29:11cloudlinux2 fail2ban: 2026-10-27 11:29:11,618 fail2ban.filter
show less
Web App Attack
๐ต๐ฑ
Budyn
2026-10-27 07:45:22
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.sweetpuddingtrap.xyz | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"167.99.173.129","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51014b238dfee14-SJC","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"167.99.173.129"}
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Mr-Money
2026-10-27 07:41:47
(1 day ago)
scenario: crowdsecurity/http-cve-probing - events: 1
Web App Attack
Hacking
๐ฉ๐ช
xdearboy
2026-10-27 05:52:03
(1 day ago)
Dionaea Honeypot: HTTP scan on path /wp-login.php
Hacking
Web App Attack
๐ซ๐ท
vtchost.com
2026-10-27 05:50:58
(1 day ago)
known bad web user agent
...
Bad Web Bot
๐น๐ท
nazemes
2026-10-27 05:42:27
(1 day ago)
Honeypot path probe: /wp-login.php on kanal.misago.com.tr
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-10-27 05:36:58
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits.
show less
Brute-Force
Web App Attack
๐ฏ๐ต
beon
2026-10-27 05:32:56
(1 day ago)
[DateTime=>2026-10-27T05:32:56Z to 2026-10-27T05:47:56Z (UTC)] , [HoneyPot_Hits=>3 times] , [HoneyPo ...
show more
[DateTime=>2026-10-27T05:32:56Z to 2026-10-27T05:47:56Z (UTC)] , [HoneyPot_Hits=>3 times] , [HoneyPots=>/wp-login.php, /wp-json/batch/v1] , [total_Hits=>4 times] , [Keyword=>WordPress]
show less
Bad Web Bot
Web App Attack