🇵🇱
Budyn
2026-08-24 03:50:48
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: definitelynotahoneypot.top | URI: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-08-23 14:45:08
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇩🇪
pltcldvlpr
2026-08-23 14:21:23
(2 weeks ago)
CMS/framework probe: 136.144.42.16 - - [23/Aug/2026:16:21:22 +0200] "GET /wp-login.php HTTP/1.1" 404 ...
show more
CMS/framework probe: 136.144.42.16 - - [23/Aug/2026:16:21:22 +0200] "GET /wp-login.php HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" asn=206092 org="F.N.S. HOLDINGS LIMITED" country=US
...
show less
Web App Attack
Anonymous
2026-08-22 02:37:47
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇮🇹
CoreTech srl
2026-08-16 03:18:57
(3 weeks ago)
cloudlinux2 fail2ban: 2026-08-16 05:13:54,070 fail2ban.filter [1791]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-16 05:13:54,070 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 136.144.42.26 - 2026-08-16 05:13:52cloudlinux2 fail2ban: 2026-08-16 05:13:57,498 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 136.144.42.16 - 2026-08-16 05:13:56cloudlinux2 fail2ban: 2026-08-16 05:13:54,074 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 136.144.42.16 - 2026-08-16 05:13:52cloudlinux2 fail2ban: 2026-08-16 05:14:50,934 fail2ban.filter [1791]: INFO [plesk-modsecurity] Found 104.22.102.83 - 2026-08-16 05:14:50cloudlinux2 fail2ban: 2026-08-16 05:14:50,923 fail2ban.filter [1791]: INFO [plesk-modsecurity] Found 104.22.102.83 - 2026-08-16 05:14:50cloudlinux2 fail2ban: 2026-08-16 05:15:37,375 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 216.24.219.65 - 2026-08-16 05:15:36cloudlinux2 fail2ban: 2026-08-16 05:15:33,404 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 216.24.219.65 - 2026-08-16 05:15:32cloud
show less
Web App Attack
🇮🇹
CoreTech srl
2026-08-16 00:33:56
(3 weeks ago)
cloudlinux2 fail2ban: 2026-08-16 02:29:04,329 fail2ban.filter [1695]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-16 02:29:04,329 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 185.251.19.78 - 2026-08-16 02:29:03cloudlinux2 fail2ban: 2026-08-16 02:29:04,325 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 45.132.227.202 - 2026-08-16 02:29:03cloudlinux2 fail2ban: 2026-08-16 02:29:34,895 fail2ban.actions [1695]: NOTICE [plesk-modsecurity] Ban 91.245.204.148cloudlinux2 fail2ban: 2026-08-16 02:29:34,802 fail2ban.filter [1695]: INFO [plesk-modsecurity] Found 91.245.204.148 - 2026-08-16 02:29:34cloudlinux2 fail2ban: 2026-08-16 02:29:34,902 fail2ban.filter [1695]: INFO [recidive] Found 91.245.204.148 - 2026-08-16 02:29:34cloudlinux2 fail2ban: 2026-08-16 02:29:43,124 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 136.144.42.16 - 2026-08-16 02:29:42cloudlinux2 fail2ban: 2026-08-16 02:29:48,250 fail2ban.filter [1695]: INFO [plesk-wordpress] Found 136.144.42.16 - 2026-08-16 02:29:47cloudlinux2 fail2ban: 2026-08-16
show less
Web App Attack
🇮🇹
VHosting
2026-08-15 20:10:03
(3 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-08-03 03:39:45
(1 month ago)
CrowdSec: lrob/wp-login-slow-bf | req: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ...
show more
CrowdSec: lrob/wp-login-slow-bf | req: /wp-login.php | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15
show less
Brute-Force
Web App Attack
🇫🇷
tecnicorioja
2026-07-28 22:01:25
(1 month ago)
wp-login attack [28/Jul/2026:15:02:37
Brute-Force
Web App Attack
🇫🇮
YF
2026-07-28 11:30:41
(1 month ago)
WordPress author enumeration
Web App Attack
Anonymous
2026-07-25 20:00:01
(1 month ago)
Attempted WordPress login:
136.144.42.16 - - [25/Jul/2026:20:58:19 +0100] "GET /wp-login.php HTTP/1 ...
show more
Attempted WordPress login:
136.144.42.16 - - [25/Jul/2026:20:58:19 +0100] "GET /wp-login.php HTTP/1.1" 404 249 "-" "Mozilla/5.0"
show less
Hacking
Web App Attack
🇫🇷
tecnicorioja
2026-07-21 22:00:41
(1 month ago)
wp-login attack [21/Jul/2026:23:23:32
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-07-08 00:15:04
(1 month ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-06-08 14:00:06
(2 months ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇫🇷
Baking333
2026-06-05 15:29:03
(3 months ago)
[redacted] 136.144.42.16 - - [05/Jun/2026:16:29:01 +0100] "GET /[redacted] HTTP/1.1" 302 5308 0/1733 ...
show more
[redacted] 136.144.42.16 - - [05/Jun/2026:16:29:01 +0100] "GET /[redacted] HTTP/1.1" 302 5308 0/173326 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" [redacted] 136.144.42.16 - - [05/Jun/2026:16:29:02 +0100] "GET /wp-admin/ HTTP/1.1" 301 4356 0/373 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
show less
Bad Web Bot
Web App Attack