Anonymous
2026-11-04 21:38:05
UTC ·
(1 day ago)
Bot / scanning and/or hacking attempts: GET /wp-login.php HTTP/2.0, POST /wp-login.php HTTP/2.0
Hacking
Web App Attack
🇳🇴
jad-abuse
2026-11-04 15:01:04
UTC ·
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 4 hits.
Brute-Force
Web App Attack
🇺🇸
cwytech
2026-11-04 10:14:22
UTC ·
(1 day ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-04 10:10:02
UTC ·
(1 day ago)
crowdsecurity/http-wordpress-scan
Brute-Force
Web App Attack
🇩🇪
wassita
2026-11-04 07:05:36
UTC ·
(1 day ago)
automated CMS vulnerability scan — requested path: /wp-login.php — response: 404
Bad Web Bot
Web App Attack
Anonymous
2026-11-04 06:48:43
UTC ·
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇸🇪
Juha Jurvanen
2026-11-04 06:48:40
UTC ·
(1 day ago)
Blocked by Scantide Guard on HTTP. Rule: 5 related observations from 150.95.105.85 within 240 minutes..
Brute-Force
🇨🇭
backslash
2026-11-04 01:48:00
UTC ·
(2 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇪🇸
loadsoporte
2026-11-04 01:21:30
UTC ·
(2 days ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇫🇷
✨
2026-11-04 01:10:19
UTC ·
(2 days ago)
Domain : itrap.co.uk
Rule : Method-Head
2026-11-04 01:09:21 W3SVC29 PLESK76 217.194.212.111 HEAD /wp/wp-login.php - 80 - 150.95.105.85 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/5 ...
show more
Domain : itrap.co.uk
Rule : Method-Head
2026-11-04 01:09:21 W3SVC29 PLESK76 217.194.212.111 HEAD /wp/wp-login.php - 80 - 150.95.105.85 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 - - 217.194.212.111 404 7 0 287 201 225 - -
show less
Port Scan
🇩🇪
Marc
2026-11-04 01:08:55
UTC ·
(2 days ago)
150.95.105.85 - - [04/Nov/2026:02:08:53 +0100] "GET /sitemap.xml HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 150.95.105.85 - - [04/Nov/2026:02:08:54 +0100] "G ...
show more
150.95.105.85 - - [04/Nov/2026:02:08:53 +0100] "GET /sitemap.xml HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 150.95.105.85 - - [04/Nov/2026:02:08:54 +0100] "GET /xmlrpc.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 150.95.105.85 - - [04/Nov/2026:02:08:54 +0100] "GET /wp-json/wp/v2/ HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Brute-Force
🇺🇸
IndigoRidge
2026-11-03 22:40:27
UTC ·
(2 days ago)
150.95.105.85 - - [03/Nov/2026:17:40:20 -0500] "GET /xmlrpc.php HTTP/1.1" 404 4938 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:17:40:22 -05 ...
show more
150.95.105.85 - - [03/Nov/2026:17:40:20 -0500] "GET /xmlrpc.php HTTP/1.1" 404 4938 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:17:40:22 -0500] "HEAD /wp-login.php HTTP/1.1" 404 4883 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:17:40:24 -0500] "GET /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:17:40:24 -0500] "GET /xmlrpc.php HTTP/1.1" 404 4938 "http://vishub.com/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:17:40:26 -0500] "GET /wp-login.php HTTP/1.1" 404 4938 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124
...
show less
Web App Attack
🇩🇪
ghel
2026-11-03 21:17:38
UTC ·
(2 days ago)
150.95.105.85 - - [03/Nov/2026:22:16:44 +0100] "HEAD /wp-login.php HTTP/1.1" 404 4026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:22:16:44 +0100] ...
show more
150.95.105.85 - - [03/Nov/2026:22:16:44 +0100] "HEAD /wp-login.php HTTP/1.1" 404 4026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:22:16:44 +0100] "GET /sitemap.xml HTTP/1.1" 404 636 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
150.95.105.85 - - [03/Nov/2026:22:16:44 +0100] "GET /xmlrpc.php HTTP/1.1" 404 636 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15"
150.95.105.85 - - [03/Nov/2026:22:16:44 +0100] "GET /wp-json/wp/v2/ HTTP/1.1" 404 636 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15"
150.95.105.85 - - [03/Nov/2026:22:16:45 +0100] "HEAD /wp/wp-login.php HTTP/1.1" 404 4025 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Bad Web Bot
Web App Attack
🇫🇷
votrewebfacile
2026-11-03 21:02:46
UTC ·
(2 days ago)
xmlrpc abuse
Brute-Force
🇧🇾
lns.bz
2026-11-03 20:22:24
UTC ·
(2 days ago)
Too many 404 requests [BY]
Web App Attack