|
🇩🇪
maxpower
|
|
(wp_login) REGOLA 1 - WP Login Attack 178.62.88.86 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 178.62.88.86 - - [22/Oct/2026:08:40:32 +0200] "POST /wp-login.php HTTP/1.1" 200 11981 "-" ...
show more
(wp_login) REGOLA 1 - WP Login Attack 178.62.88.86 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 178.62.88.86 - - [22/Oct/2026:08:40:32 +0200] "POST /wp-login.php HTTP/1.1" 200 11981 "-" "Mozilla/5.0" "-" host=frleone.ovh
178.62.88.86 - - [22/Oct/2026:08:41:14 +0200] "POST /wp-login.php HTTP/1.1" 200 12100 "-" "Mozilla/5.0" "-" host=frleone.ovh
178.62.88.86 - - [22/Oct/2026:08:41:53 +0200] "POST /wp-login.php HTTP/1.1" 200 12036 "-" "Mozilla/5.0" "-" host=frleone.ovh
178.62.88.86 - - [22/Oct/2026:08:42:39 +0200] "POST /wp-login.php HTTP/1.1" 200 12005 "-" "Mozilla/5.0" "-" host=frleone.ovh
178.62.88.86 - - [22/Oct/2026:08:43:28 +0200] "POST /wp-login.php HTTP/1.1" 200 12051 "-" "Mozilla/5.0" "-" host=frleone.ovh
show less
|
Port Scan
|
|
🇯🇵
cyber-guardians.net
|
|
Brute-force login attack detected by WordPress firewall. 5 failed login attempts within the configured time window.
|
Brute-Force
|
|
🇵🇱
Budyn
|
|
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.astropot.site | URI: /wp-json/batch/v1 | UA: M ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.astropot.site | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"178.62.88.86","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e5cf3c5e53cd72-LHR","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"178.62.88.86"}
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
Bedios GmbH
|
|
Scanning for WordPress Installations and Vulnerabilities
|
Web App Attack
|
|
🇵🇱
Budyn
|
|
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.astropot.site | URI: /wp-login.php | UA: Mozilla/5.0 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.astropot.site | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"178.62.88.86","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e5020bb9689408-LHR","Connection":"Keep-Alive","Accept":"*\/*","Accept-Encoding":"gzip, br","X-Forwarded-For":"178.62.88.86"}
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
Carsten
|
|
GET [wp-login.php]
|
Port Scan
|
|
🇺🇸
EricTheRedFL
|
|
Port scan of TCP port 80
|
Port Scan
Hacking
|
|
🇺🇸
EricTheRedFL
|
|
Apr 29 04:42:05 egress kernel: \[3855409.638843\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17:31:2a:75:8e:c4:ca:2b:5b:10:df:08:00 SRC=178.62.88.86 DST=67.191.7.156 LEN=52 TOS=0x00 PREC=0x20 TTL=104 ID=56999 DF PROTO=TCP SPT=64816 DPT=80 WINDOW ...
show more
Apr 29 04:42:05 egress kernel: \[3855409.638843\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17:31:2a:75:8e:c4:ca:2b:5b:10:df:08:00 SRC=178.62.88.86 DST=67.191.7.156 LEN=52 TOS=0x00 PREC=0x20 TTL=104 ID=56999 DF PROTO=TCP SPT=64816 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0
Apr 29 04:42:06 egress kernel: \[3855410.003864\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17:31:2a:75:8e:c4:ca:2b:5b:10:df:08:00 SRC=178.62.88.86 DST=67.191.7.156 LEN=52 TOS=0x00 PREC=0x20 TTL=90 ID=50524 DF PROTO=TCP SPT=30073 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
Apr 29 04:42:06 egress kernel: \[3855410.653920\] Denied-by-filter:badtraffic IN=eth3 OUT= MAC=00:17:31:2a:75:8e:c4:ca:2b:5b:10:df:08:00 SRC=178.62.88.86 DST=67.191.7.156 LEN=52 TOS=0x00 PREC=0x20 TTL=90 ID=14574 DF PROTO=TCP SPT=25957 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
|
Port Scan
Brute-Force
|
