🇨🇦
lakered
2026-11-01 04:08:43
UTC ·
(1 week ago)
Detectors: [NGINX] | Reasons: Nginx: Malicious proxy headers injection (spoofing attempt on direct connection) | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,13:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.90) | UA: Mozilla/5.0 (X11; Linux x86_6 ...
show more
Detectors: [NGINX] | Reasons: Nginx: Malicious proxy headers injection (spoofing attempt on direct connection) | Evidence: High-Criminality-Signature (p0f:*:64:0:*:mss*44,13:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.90) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/126 Safari/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:PPPoE, Uptime:0m)
show less
Port Scan
Web App Attack
🇩🇪
MusicLibrary
2026-10-14 00:36:22
UTC ·
(3 weeks ago)
Attempted access to non existent wordpress urls
Bad Web Bot
🇧🇪
voormedia
2026-10-12 15:34:04
UTC ·
(3 weeks ago)
Accessed trap at '/wp-login.php'
Web App Attack
🇳🇱
Alt255
2026-10-01 05:25:06
UTC ·
(1 month ago)
[cb-09al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 65.111.15.98 - - [01/Oct/2026:07:22:09 +0200] "POST /wp-login.php HTTP/1.1" 301 4613 "-" "Goosee-Audit/1.0 (+internal-security-audit)"
6 ...
show more
[cb-09al] WordPress login brute-force: 4 suspicious requests detected by fail2ban jail apache-wordpress. Example: 65.111.15.98 - - [01/Oct/2026:07:22:09 +0200] "POST /wp-login.php HTTP/1.1" 301 4613 "-" "Goosee-Audit/1.0 (+internal-security-audit)"
65.111.15.98 - - [01/Oct/2026:07:23:28 +0200] "POST /wp-login.php HTTP/1.1" 301 4614 "-" "Goosee-Audit/1.0 (+internal-security-audit)"
65.111.15.98 - - [01/Oct/2026:07:24:31 +0200] "POST /wp-login.php HTTP/1.1" 301 4614 "-" "Goosee-Audit/1.0 (+internal-security-audit)"
65.111.15.98 - - [01/Oct/2026:07:24:46 +0200] "POST /wp-login.php HTTP/1.1" 200 7834 "-" "Goosee-Audit/1.0 (+internal-security-audit)"
...
show less
Brute-Force
Web App Attack
🇺🇸
boombies
2026-09-25 13:59:00
UTC ·
(1 month ago)
awilson
Brute-Force
🇺🇸
cwytech
2026-09-25 06:14:47
UTC ·
(1 month ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-20 06:22:26
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.15.98
2026-09-20T06:58:14+02:00 vpn Access-Reject 'gerencia' station: 65.111.15.98 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.15.98
2026-09-20T06:58:14+02:00 vpn Access-Reject 'gerencia' station: 65.111.15.98 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-09-18 04:14:12
UTC ·
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
Goetz
2026-09-03 09:16:10
UTC ·
(2 months ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
🇫🇷
Sklurk
2026-08-17 00:51:10
UTC ·
(2 months ago)
Web App Attack
Web App Attack
🇩🇪
Jochen Pretli
2026-08-15 12:04:24
UTC ·
(2 months ago)
connection to honeypot
Email Spam
Port Scan
🇨🇭
backslash
2026-08-15 09:48:00
UTC ·
(2 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇬🇧
Bytemark
2026-08-12 19:55:42
UTC ·
(2 months ago)
65.111.15.98 - - [12/Aug/2026:20:55:38 +0100] "GET /wp-login.php HTTP/1.1" 301 6773 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
65.111.15.98 - - [12/Aug/2026:20:55:40 +0100] "G ...
show more
65.111.15.98 - - [12/Aug/2026:20:55:38 +0100] "GET /wp-login.php HTTP/1.1" 301 6773 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
65.111.15.98 - - [12/Aug/2026:20:55:40 +0100] "GET /wp-login.php HTTP/1.1" 301 6886 "https://distancelearningcentre.org.uk/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
65.111.15.98 - - [12/Aug/2026:20:55:41 +0100] "GET /wp-login.php HTTP/1.1" 404 6643 "https://distancelearningcentre.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇫🇷
Sklurk
2026-07-08 01:30:23
UTC ·
(4 months ago)
Web App Attack
Web App Attack
🇺🇸
nowyouknow
2026-05-14 14:38:13
UTC ·
(5 months ago)
(From [email protected] ) Hi Lampe Chiropractic,
I wanted to bump this in case you missed it — I built an AI agent just for Lampe Chiropractic,
trained on your website, Google info, and everything I could find.
It’s ready to answ ...
show more
(From [email protected] ) Hi Lampe Chiropractic,
I wanted to bump this in case you missed it — I built an AI agent just for Lampe Chiropractic,
trained on your website, Google info, and everything I could find.
It’s ready to answer customer questions, book appointments, and even follow up automatically. On average, our agents help increase leads by 17% without any work needed on your part.
Again, this isn’t a pitch — just 20 minutes to test-drive your new AI employee.
Here’s the link to book a time: getdandy.com/schedule-a-call/ or call me at (949)-755-7782
Talk soon,
Thank you,
Jennifer O'Brien | Director of Operations
GetDandy
getdandy.com/schedule-a-call/
Unsubscribe here: bit.ly/42wnUsa
show less
Phishing
Web Spam
