[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to decoy service. Original message: Web honeypot: 7 malicious requests. Attack types: wordpress_scan, generic_scan. Sample: HEAD /old/ HTTP/1.1. Attempted ...
show more[Honeypot] Malicious activity detected by honeypot on port 80. IP attempted unauthorized access to decoy service. Original message: Web honeypot: 7 malicious requests. Attack types: wordpress_scan, generic_scan. Sample: HEAD /old/ HTTP/1.1. Attempted credentials captured.
show less
Triggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (HEAD) | Endpoint: /backup/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 • Gen ...
show moreTriggered Cloudflare WAF (firewallCustom) from US.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (HEAD) | Endpoint: /backup/ | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Repeated requests for suspicious nonexistent URLs, for example: /backup/ (HTTP/1.1 port 80, bogus vhost, user agent: "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36 ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /backup/ (HTTP/1.1 port 80, bogus vhost, user agent: "Mozilla/5.0 (Linux; U; Android 10; en-US; CPH2015) AppleWebKit/537.36 (KHTML, like Gecko) UCBrowser/13.5.8.1311 Mobile Safari/537.36")
show less