🇺🇸
rsiddall
2026-09-17 15:34:46
(4 days ago)
68.183.180.119 - - [17/Sep/2026:11:32:12 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://www. ...
show more
68.183.180.119 - - [17/Sep/2026:11:32:12 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://www.cthumanist.org/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
68.183.180.119 - - [17/Sep/2026:11:32:44 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://www.cthumanist.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
68.183.180.119 - - [17/Sep/2026:11:33:13 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://www.cthumanist.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
68.183.180.119 - - [17/Sep/2026:11:33:44 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://www.cthumanist.org/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
68.183.180.119 -
...
show less
Brute-Force
🇵🇱
Budyn
2026-09-17 05:39:00
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.sweetpuddingtrap.online | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-17 00:34:50
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.dont-eat-the-pudding.top | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-16 21:38:11
(4 days ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 21:14:06
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 68.183.180.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.180.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:13:58.889104 2026] [security2:error] [pid 401387:tid 401387] [client 68.183.180.119:58763] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.vztest.lobibilisim.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vztest.lobibilisim.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqsGlilRdzjnYyYbyjBfZQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-16 20:02:39
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.astropot.space | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 19:32:25
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 68.183.180.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.180.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:32:18.077492 2026] [security2:error] [pid 19957:tid 19957] [client 68.183.180.119:61548] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sharonmauldin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sharonmauldin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqruwmVCClygyZc4L7gFwgAAAAc"], referer: https://www.google.com/search?q=wordpress
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-16 17:48:11
(4 days ago)
shotbysuzanne.com.au:443 68.183.180.119 - - [17/Sep/2026:03:48:08 +1000] "GET /?author=1 HTTP/1.1" 4 ...
show more
shotbysuzanne.com.au:443 68.183.180.119 - - [17/Sep/2026:03:48:08 +1000] "GET /?author=1 HTTP/1.1" 404 119535 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 16:44:11
(4 days ago)
(mod_security) mod_security (id:225170) triggered by 68.183.180.119 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 68.183.180.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:44:06.815444 2026] [security2:error] [pid 16704:tid 16704] [client 68.183.180.119:56559] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||schlegelcreative.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "schlegelcreative.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aqrHVrepAqQNSU-SR3_XpgAAADM"], referer: https://www.bing.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-09-16 16:22:50
(4 days ago)
Web App Attack
🇵🇱
Budyn
2026-09-16 15:56:30
(4 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.dont-eat-the-pudding.top | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
