π§π·
ICS Labs
2026-10-18 21:33:52
(4 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
Brute-Force
π§πͺ
cmbplf
2026-10-17 22:30:42
(5 days ago)
2.538 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
πͺπ¨
CYBER-SECURITY-MM
2026-10-17 11:15:10
(6 days ago)
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-cve-probing. HTTP 404. Path: /wp-json/ ...
show more
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-cve-probing. HTTP 404. Path: /wp-json/batch/v1. Evidence: 1 matching alerts.
show less
Web App Attack
π΅π±
Budyn
2026-10-17 11:11:55
(6 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: registry.goblinpot.website | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
π¨π
Origon
2026-10-17 10:59:04
(6 days ago)
http-cve-probing - IP: 201.79.50.233 - time="2026-10-17T12:59:03+02:00" level=info msg="(555f66b4f6 ...
show more
http-cve-probing - IP: 201.79.50.233 - time="2026-10-17T12:59:03+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 201.79.50.233 (BR/7738) : 4h ban on Ip 201.79.50.233" module=db
show less
Web App Attack
π©πͺ
ghostwarriors
2026-10-17 10:20:06
(6 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
πΈπͺ
vaia.cloud
2026-10-17 10:20:01
(6 days ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
π©πͺ
yitzhaq
2026-10-17 10:04:31
(6 days ago)
201.79.50.233 - - [17/Oct/2026:09:02:16 +0200] "GET /wp-login.php HTTP/1.1" 301 590 "-" "Mozilla/5.0 ...
show more
201.79.50.233 - - [17/Oct/2026:09:02:16 +0200] "GET /wp-login.php HTTP/1.1" 301 590 "-" "Mozilla/5.0"
201.79.50.233 - - [17/Oct/2026:09:02:19 +0200] "GET /wp-login.php HTTP/1.1" 200 8786 "-" "Mozilla/5.0"
201.79.50.233 - - [17/Oct/2026:09:02:23 +0200] "GET /?author=1 HTTP/1.1" 301 616 "-" "Mozilla/5.0"
201.79.50.233 - - [17/Oct/2026:09:02:24 +0200] "GET /?feed=rss2 HTTP/1.1" 301 719 "-" "Mozilla/5.0"
201.79.50.233 - - [17/Oct/2026:09:02:24 +0200] "GET /feed/ HTTP/1.1" 200 1261 "-" "Mozilla/5.0"
201.79.50.233 - - [17/Oct/2026:12:04:26 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
201.79.50.233 - - [17/Oct/2026:12:04:26 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4444 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
201.79.50.233 - - [17/Oct/2026:12:04:27 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 570 "-" "Mozilla
show less
Web App Attack
Hacking
π―π΅
VXG-NET
2026-10-17 09:52:09
(6 days ago)
port=80, indicator_type=sql-injection
SQL Injection
π΅π±
Budyn
2026-10-17 08:38:52
(6 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.teddypot.store | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
π©πͺ
EGP Abuse Dept
2026-10-17 06:23:31
(6 days ago)
Scanning for web/db/file exploits on www.opticienstork.nl
SQL Injection
Bad Web Bot
Web App Attack
π΅π±
Budyn
2026-10-17 06:21:25
(6 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.cloud | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack