๐ณ๐ฑ
Site.eu
2026-06-22 02:14:08
(9 hours ago)
Excessive 404/403 errors
Brute-Force
๐ฉ๐ช
dennis.reinitz
2026-06-21 10:25:00
(1 day ago)
WordPress mass-compromise: HTTP POST to obfuscated PHP backdoors (hex2bin+XOR temp-drop loaders) and ...
show more
WordPress mass-compromise: HTTP POST to obfuscated PHP backdoors (hex2bin+XOR temp-drop loaders) and polymorphic file-manager web shells; source IP involved in web app attack / RCE attempts against staging.pfefferwerk.de.
show less
Exploited Host
๐บ๐ธ
1cyb3rpunk
2026-06-20 19:43:18
(1 day ago)
Honeypot trap [wordpress_install_probe] on sectrace.org โ path: /wp-login.php stage: recon. Automate ...
show more
Honeypot trap [wordpress_install_probe] on sectrace.org โ path: /wp-login.php stage: recon. Automated scanner/attacker activity.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Jason Howell
2026-06-20 11:53:09
(1 day ago)
213.209.159.254 - - [20/Jun/2026:06:51:01 -0500] "GET /wp-login.php HTTP/1.1" 200 4831 "-" "Mozilla/ ...
show more
213.209.159.254 - - [20/Jun/2026:06:51:01 -0500] "GET /wp-login.php HTTP/1.1" 200 4831 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.254 - - [20/Jun/2026:06:51:04 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
213.209.159.254 - - [20/Jun/2026:06:51:05 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
213.209.159.254 - - [20/Jun/2026:06:51:11 -0500] "POST /xmlrpc.php HTTP/1.1" 200 3191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.254 - - [20/Jun/2026:06:53:08 -0500] "GET /wp-login.php HTTP/1.1" 200 4833 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-06-20 11:30:12
(1 day ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
Jason Howell
2026-06-20 09:36:26
(2 days ago)
213.209.159.254 - - [20/Jun/2026:04:34:34 -0500] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/ ...
show more
213.209.159.254 - - [20/Jun/2026:04:34:34 -0500] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
213.209.159.254 - - [20/Jun/2026:04:34:35 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4547 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
213.209.159.254 - - [20/Jun/2026:04:34:35 -0500] "POST /xmlrpc.php HTTP/1.1" 200 4548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.254 - - [20/Jun/2026:04:36:22 -0500] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.254 - - [20/Jun/2026:04:36:25 -0500] "POST /wp-login.php?wp_lang=en_US HTTP/1.1" 200 5835 "https://www.ponderosamobilehomepark.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-06-20 06:15:03
(2 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-06-18 08:46:53
(4 days ago)
Excessive 404/403 errors
Brute-Force
๐ณ๐ฑ
Site.eu
2026-06-14 22:38:54
(1 week ago)
Excessive 404/403 errors
Brute-Force
๐ฉ๐ช
excill
2026-06-13 03:03:40
(1 week ago)
Honeypot mesh observed 1150 attack events in 24h โ cowrie/dionaea/heralding/suricata
Port Scan
Hacking
Brute-Force
SSH
๐บ๐ธ
1cyb3rpunk
2026-06-13 00:31:44
(1 week ago)
Honeypot trap [wordpress_install_probe] on sectrace.org โ path: /wp-login.php stage: recon. Automate ...
show more
Honeypot trap [wordpress_install_probe] on sectrace.org โ path: /wp-login.php stage: recon. Automated scanner/attacker activity.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Jason Howell
2026-06-12 07:01:19
(1 week ago)
213.209.159.254 - - [12/Jun/2026:02:00:53 -0500] "GET /wp-login.php HTTP/1.1" 200 5701 "-" "Mozilla/ ...
show more
213.209.159.254 - - [12/Jun/2026:02:00:53 -0500] "GET /wp-login.php HTTP/1.1" 200 5701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
213.209.159.254 - - [12/Jun/2026:02:01:17 -0500] "GET /wp-login.php HTTP/1.1" 200 5703 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
213.209.159.254 - - [12/Jun/2026:02:01:18 -0500] "POST /wp-login.php?wp_lang=en_US HTTP/1.1" 200 5836 "https://www.ponderosamobilehomepark.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0"
213.209.159.254 - - [12/Jun/2026:02:01:18 -0500] "GET /wp-login.php?wp_lang=en_US HTTP/1.1" 200 5701 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
213.209.159.254 - - [12/Jun/2026:02:01:18 -0500] "POST /wp-login.php?wp_lang=en_US HTTP/1.1" 200 2101 "https://www.ponderosamobilehomepark.com/wp-login.php?wp_lang=en_US" "Mozilla
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-06-12 06:33:33
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-06-08 11:35:20
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
dynamix
2026-05-30 10:54:16
(3 weeks ago)
Multiple WAF Violations
Web App Attack