🇩🇪
ghostwarriors
2026-09-07 20:50:03
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-07 20:27:56
(4 days ago)
209.38.229.136 - - [07/Sep/2026:07:34:23 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5. ...
show more
209.38.229.136 - - [07/Sep/2026:07:34:23 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5.0"
209.38.229.136 - - [07/Sep/2026:07:34:23 +0200] "GET /wp-login.php HTTP/1.1" 404 4451 "-" "Mozilla/5.0"
209.38.229.136 - - [07/Sep/2026:22:27:53 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 551 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
209.38.229.136 - - [07/Sep/2026:22:27:53 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4500 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
209.38.229.136 - - [07/Sep/2026:22:27:53 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
209.38.229.136 - - [07/Sep/2026:22:27:53 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4500 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari
show less
Web App Attack
Hacking
🇧🇪
cmbplf
2026-09-07 17:43:29
(4 days ago)
3.926 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot
🇺🇸
Gabriel Camargo
2026-09-07 13:17:27
(5 days ago)
209.38.229.136 - - [07/Sep/2026:08:16:25 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozil ...
show more
209.38.229.136 - - [07/Sep/2026:08:16:25 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
209.38.229.136 - - [07/Sep/2026:08:16:56 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
209.38.229.136 - - [07/Sep/2026:08:17:27 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Brute-Force
SSH
🇵🇱
Budyn
2026-09-07 10:46:51
(5 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.site | URI: /wp-json/batch/v1 | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-09-07 08:54:38
(5 days ago)
(PERMBLOCK) 209.38.229.136 (DE/Germany/-) has had more than 4 temp blocks
Hacking
🇺🇸
integrantservices.com
2026-09-07 06:11:34
(5 days ago)
(wordpress) Failed wordpress login from 209.38.229.136 (DE/Germany/-)
Brute-Force
Anonymous
2026-09-07 06:07:06
(5 days ago)
Automated web scanner. Requested suspicious paths: /wp-login.php. UTC: 2026-09-07 05:46:13.
Web App Attack
🇫🇷
masterguru
2026-09-07 06:00:54
(5 days ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)
Hacking
🇮🇹
VHosting
2026-09-07 06:00:10
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-09-07 05:58:56
(5 days ago)
cloudlinux2 fail2ban: 2026-09-07 07:53:52,425 fail2ban.actions [1794]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-07 07:53:52,425 fail2ban.actions [1794]: NOTICE [plesk-modsecurity] Unban 178.77.180.227cloudlinux2 fail2ban: 2026-09-07 07:54:16,450 fail2ban.filter [1794]: INFO [plesk-proftpd] Found 161.35.21.151 - 2026-09-07 07:54:15cloudlinux2 fail2ban: 2026-09-07 07:55:06,968 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 209.38.229.136 - 2026-09-07 07:55:06cloudlinux2 fail2ban: 2026-09-07 07:55:06,637 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 209.38.229.136 - 2026-09-07 07:55:06cloudlinux2 fail2ban: 2026-09-07 07:55:06,635 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 209.38.229.136 - 2026-09-07 07:55:06cloudlinux2 fail2ban: 2026-09-07 07:55:07,486 fail2ban.actions [1794]: NOTICE [plesk-wordpress] Ban 209.38.229.136cloudlinux2 fail2ban: 2026-09-07 07:55:07,492 fail2ban.filter [1794]: INFO [recidive] Found 209.38.229.136 - 2026-09-07 07:55:07cloudlinux2 fail2ban: 2026-09-07 07:55:13,138 fail2ban.a
show less
FTP Brute-Force
Web App Attack
🇺🇸
FreeMyIP
2026-09-07 05:31:58
(5 days ago)
Automated fail2ban report: web application attack / scanning for exploitable paths.
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-09-07 05:25:49
(5 days ago)
Scanning for web/db/file exploits on www.vttb.nl
SQL Injection
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-07 05:15:24
(5 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.site | URI: /wp-login.php | UA: Mozilla/5.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack