🇨🇦
Kacelly Nima
2026-09-21 04:51:04
(2 hours ago)
Bad Web Bot
Blog Spam
Brute-Force
DDoS Attack
DNS Compromise
DNS Poisoning
Email Spam
Exploited Host
Fraud Orders
Fraud VoIP
FTP Brute-Force
Hacking
IoT Targeted
Open Proxy
Phishing
Ping of Death
Port Scan
Spoofing
SQL Injection
SSH
VPN IP
Web App Attack
Web Spam
🇪🇸
raiolanetworks.com
2026-09-20 10:45:46
(20 hours ago)
Honeypot detection: Cisco ASA exploit attempt. 2 events observed. Reported automatically from a hone ...
show more
Honeypot detection: Cisco ASA exploit attempt. 2 events observed. Reported automatically from a honeypot sensor.
show less
Hacking
🇪🇸
robotstxt
2026-09-18 00:01:08
(3 days ago)
45.3.48.48 - - [18/Sep/2026:00:00:39 +0000] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 980 "-" ...
show more
45.3.48.48 - - [18/Sep/2026:00:00:39 +0000] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="45.3.48.48"
45.3.48.48 - - [18/Sep/2026:00:00:40 +0000] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="45.3.48.48"
45.3.48.48 - - [18/Sep/2026:00:00:40 +0000] "GET /wp-admin/network/theme-editor.php HTTP/2.0" 403 980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="45.3.48.48"
45.3.48.48 - - [18/Sep/2026:00:00:41 +0000] "GET /wp-admin/network/plugin-editor.php HTTP/2.0" 403 980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="45.3.48.48"
45.3.48.48 - - [18/Sep/2026:00:00:42 +0000] "GET /wp-admin/plugin-install.php HTTP/2.0" 403 980 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101
...
show less
Web App Attack
🇺🇸
drewf.ink
2026-09-04 11:21:19
(2 weeks ago)
[11:21] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ...
show more
[11:21] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon)
show less
Web App Attack
🇸🇪
OnTheEdge
2026-09-03 23:16:50
(2 weeks ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇫🇷
Sklurk
2026-08-11 00:47:07
(1 month ago)
Web App Attack
Web App Attack
🇫🇷
Tilellit.PRO
2026-07-08 12:42:34
(2 months ago)
WP Armour Plugin detection
Web Spam
Brute-Force
🇪🇸
librebit
2026-07-04 03:16:42
(2 months ago)
Brute force
Brute-Force
🇩🇪
iNetWorker
2026-07-03 05:10:40
(2 months ago)
trolling for resource vulnerabilities
Web App Attack
2026-07-02 19:33:10
(2 months ago)
[server.techsupportltd.gr] httpd-login-spray-site: sites=www.wavedancercyprus.com; logs=/var/log/htt ...
show more
[server.techsupportltd.gr] httpd-login-spray-site: sites=www.wavedancercyprus.com; logs=/var/log/httpd/domains/wavedancercyprus.com.log; samples=site_wide=true | distinct_ips=28 | /wp-login.php
show less
Hacking
Web App Attack
🇲🇹
Malta
2026-07-02 08:10:01
(2 months ago)
45.3.48.48 - - [02/Jul/2026:10:10:01 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; I ...
show more
45.3.48.48 - - [02/Jul/2026:10:10:01 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
🇩🇪
FeG Deutschland
2026-07-01 19:16:19
(2 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇲🇽
octageeks.com
2026-06-26 04:08:05
(2 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
2026-06-25 11:36:24
(2 months ago)
[server.tmg.gr] httpd-login-spray-site: sites=geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; ...
show more
[server.tmg.gr] httpd-login-spray-site: sites=geomed.gr; logs=/var/log/httpd/domains/geomed.gr.log; samples=site_wide=true | distinct_ips=12 | /wp-login.php
show less
Hacking
Web App Attack
🇬🇷
setupgr
2026-06-25 03:26:08
(2 months ago)
(mod_security) mod_security (id:900001) triggered by 45.3.48.48 (US/United States/Virginia/Ashburn/- ...
show more
(mod_security) mod_security (id:900001) triggered by 45.3.48.48 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 06:26:07.509520 2026] [security2:error] [pid 357905:tid 358020] [client 45.3.48.48:38219] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "ajyfzw-pgf0Bh-qkv8-CrAAAAIk"], referer: https://villa-izabela.com/wp-login.php
show less
Port Scan