64.23.182.148

denied traffic to a honeypot network. destination port 2222.

tcp/44444 (2 or more attempts)

FW-PortScan: Traffic Blocked srcport=61012 dstport=8088

Blocked by UFW (TCP on 2222) Source port: 61015 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 64.23.182.148) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter

2026-05-07 12:04:36 /

Honeypot hit: HTTP/1.1 request on 2000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: ... show more Honeypot hit: HTTP/1.1 request on 2000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 2000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less

Auto-ban: >3000 req/min op 2026-05-03

3.536 POST requests with url.path */wp-login.php

wordpress scan on 951.today/wp-login.php — WellSpr.ing/NetSentinel civic-AI security layer

Scanning for web/db/file exploits on www.beelenloodgietersbedrijf.nl

Searching for vulnerable scripts

2026-04-23 11:17:27 /

PSAD port scan detected

HoneyPot hit - Aaran.cloud | Web Scan | web exploitation | GET / HTTP/1.1 Host: 103.1.72.46 Connection: keep-alive sec-ch-ua: "Chromium";v="142", "Not:A-Brand"

tcp/10000 (2 or more attempts)