๐ต๐ฑ
Budyn
2026-10-05 12:46:56
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.definitelynotahoneypot.top | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-05 07:12:11
(1 day ago)
170.64.170.182 - - [05/Oct/2026:08:23:59 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla ...
show more
170.64.170.182 - - [05/Oct/2026:08:23:59 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:26:00 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:27:48 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:29:45 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:31:55 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:09:01:59 +0200] "POST /wp-login.php HTTP/1.1" 200 14700 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:09:04:36 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:09:07:08 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:09:09:40 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:09:12:09 +0200
show less
Web App Attack
Brute-Force
๐ฉ๐ช
yitzhaq
2026-10-05 06:31:57
(1 day ago)
170.64.170.182 - - [05/Oct/2026:08:23:59 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla ...
show more
170.64.170.182 - - [05/Oct/2026:08:23:59 +0200] "POST /wp-login.php HTTP/1.1" 200 14699 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:26:00 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:27:48 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:29:45 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:31:55 +0200] "POST /wp-login.php HTTP/1.1" 200 10981 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:06:22 +0200] "GET /wp-login.php HTTP/1.1" 301 593 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:06:23 +0200] "GET /wp-login.php HTTP/1.1" 200 8261 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:06:24 +0200] "GET /?author=1 HTTP/1.1" 301 617 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:06:24 +0200] "GET /?feed=rss2 HTTP/1.1" 301 720 "-" "Mozilla/5.0"
170.64.170.182 - - [05/Oct/2026:08:06:25 +0200] "GET /feed/ HT
show less
Web App Attack
Brute-Force
๐ซ๐ท
masterguru
2026-10-05 06:30:58
(1 day ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-201)
Hacking
๐ต๐ฑ
Budyn
2026-10-05 05:24:28
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: docker.teddypot.cloud | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-10-05 05:23:39
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
en0
2026-10-04 08:28:07
(2 days ago)
170.64.170.182 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident cou ...
show more
170.64.170.182 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 3
show less
Port Scan
Anonymous
2026-10-04 08:00:20
(2 days ago)
fail2ban:piguard:14,18
Port Scan
Brute-Force
๐ณ๐ฑ
VMHeaven.io
2026-10-04 07:24:52
(2 days ago)
Blocked by UFW [5002/tcp]
Source port: 48458
TTL: 243
Packet length: 40
Port Scan
๐ฌ๐ง
sonot
2026-10-04 07:24:47
(2 days ago)
Blocked by UFW on tunneluk01 [5002/tcp] | SPT: 36049 | TTL: 234 | LEN: 40 | TOS: 0x00 โข Reported by: ...
show more
Blocked by UFW on tunneluk01 [5002/tcp] | SPT: 36049 | TTL: 234 | LEN: 40 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ท๐ธ
pexodelic
2026-09-14 07:54:07
(3 weeks ago)
Automated report from web and SSH server logs: 6 requests probing for exposed secrets (.env, .git, c ...
show more
Automated report from web and SSH server logs: 6 requests probing for exposed secrets (.env, .git, config files). Reported by our automated log scan at 2026-09-13 03:05 UTC; counts cover the current log rotation window.
show less
Web App Attack
๐ต๐ฑ
Budyn
2026-09-13 09:49:26
(3 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.teddypot.site | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
welife
2026-09-13 06:42:55
(3 weeks ago)
Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail ...
show more
Probing for a WordPress login against a web application, blocked at the host firewall.
fail2ban jail: cartt-probe.
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-13 06:00:03
(3 weeks ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
๐ต๐ฑ
Budyn
2026-09-13 05:05:18
(3 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: minio.teddypot.site | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack