🇺🇸
mawan
2026-11-02 01:51:56
UTC ·
(1 week ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇵🇱
Budyn
2026-11-01 06:19:47
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: forum.goblinpot.website | Path: /wp-login.php | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: forum.goblinpot.website | Path: /wp-login.php | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇦🇺
Proxay Fox
2026-11-01 05:01:43
UTC ·
(1 week ago)
87.58.197.83 - - [01/Nov/2026:15:01:05 +1000] "GET / HTTP/2.0" 200 31413 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0" "87.58.197.83" 444 31891 TLSv1.3/TLS_AES_256_GCM_SHA384 . 5d242179de3ee3eced7de3e6bb87 ...
show more
87.58.197.83 - - [01/Nov/2026:15:01:05 +1000] "GET / HTTP/2.0" 200 31413 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0" "87.58.197.83" 444 31891 TLSv1.3/TLS_AES_256_GCM_SHA384 . 5d242179de3ee3eced7de3e6bb87a764f9eef055fe467127c7c089229811eb3c
87.58.197.83 - - [01/Nov/2026:15:01:39 +1000] "GET /wp-content/languages/index.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "87.58.197.83" 54 314 TLSv1.3/TLS_AES_256_GCM_SHA384 . 2bae4c4f2180331d96e414ab71b5674cc0957d9f2b2b3612b5b6e418e7628833
87.58.197.83 - - [01/Nov/2026:15:01:39 +1000] "GET /wp-includes/index.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "87.58.197.83" 47 314 TLSv1.3/TLS_AES_256_GCM_SHA384 . 2bae4c4f2180331d96e414ab71b5674cc0957d9f2b2b3612b5b6e418e7628833
87.58.197.83 - - [01/Nov/2026:15:01:39 +100
...
show less
Brute-Force
Web App Attack
🇺🇸
1gz
2026-11-01 04:08:13
UTC ·
(1 week ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-content/themes/primecare/index.php
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-Abu ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (POST method)
Endpoint: /wp-content/themes/primecare/index.php
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
Budyn
2026-11-01 02:51:31
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: cloud.teddypot.space | Path: /wp-admin/js/common.min.js | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
[Budyn Honeypot Sinkhole] | Attack type: WP Path Scanning (Recon) | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: cloud.teddypot.space | Path: /wp-admin/js/common.min.js | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-31 21:12:05
UTC ·
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-31 20:52:57
UTC ·
(1 week ago)
Suspicious HTTP(s) activity without a user agent provided
Bad Web Bot
🇩🇪
ardexter
2026-10-31 20:10:11
UTC ·
(1 week ago)
Wordpress attack and DDOS
DDoS Attack
Web App Attack
🇮🇹
VHosting
2026-10-31 15:45:04
UTC ·
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
maxpower
2026-10-31 14:08:13
UTC ·
(1 week ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 87.58.197.83 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/31 15:08:09 [error] 2198233#2198233: *928283 access forbidden by ru ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 87.58.197.83 (US/United States/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/31 15:08:09 [error] 2198233#2198233: *928283 access forbidden by rule, client: 87.58.197.83, server: villapardi.it, request: "GET /wp-includes/index.php HTTP/1.1", host: "villapardi.it"
2026/10/31 15:08:09 [error] 2198241#2198241: *928287 access forbidden by rule, client: 87.58.197.83, server: villapardi.it, request: "GET /wp-content/uploads/index.php HTTP/1.1", host: "villapardi.it"
2026/10/31 15:08:10 [error] 2198234#2198234: *928296 access forbidden by rule, client: 87.58.197.83, server: villapardi.it, request: "GET /wp-content/cache/index.php HTTP/1.1", host: "villapardi.it"
show less
Port Scan
🇺🇸
netlinkpro
2026-10-31 13:17:00
UTC ·
(1 week ago)
Web scanning: probed for /wp-login.php, /wp-admin/js/common.min.js, /wp-includes/css/dist/block-library/style.min.css. 4 requests, all refused (HTTP 4xx), 2026-10-31 13:17–13:17 UTC.
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-31 07:13:07
UTC ·
(1 week ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇮🇹
Inartis
2026-10-31 04:10:27
UTC ·
(1 week ago)
[Sat Oct 31 05:10:26.332023 2026] [proxy_fcgi:error] [pid 2015397:tid 132347252954816] [client 87.58.197.83:55828] AH01071: Got error 'Primary script unknown'
[Sat Oct 31 05:10:26.958810 2026] [proxy_fcgi:error] [pid 2015397:tid 132346623796928] [cli ...
show more
[Sat Oct 31 05:10:26.332023 2026] [proxy_fcgi:error] [pid 2015397:tid 132347252954816] [client 87.58.197.83:55828] AH01071: Got error 'Primary script unknown'
[Sat Oct 31 05:10:26.958810 2026] [proxy_fcgi:error] [pid 2015397:tid 132346623796928] [client 87.58.197.83:55840] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-10-31 03:11:33
UTC ·
(1 week ago)
(wplogin_block) Blocked WP-Login Access Attempt 87.58.197.83 (US/United States/Kansas/Kansas City/-/[AS62164 Heymman Servers Corporation]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 87.58.197.83 - - [31/Oc ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 87.58.197.83 (US/United States/Kansas/Kansas City/-/[AS62164 Heymman Servers Corporation]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 87.58.197.83 - - [31/Oct/2026:05:08:45 +0200] "GET /wp-login.php HTTP/1.1" 200 11055 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Port Scan
2026-10-31 00:35:01
UTC ·
(1 week ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
