๐ณ๐ฑ
Site.eu
2026-08-31 20:48:09
(1 day ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ฉ๐ช
dbmwebdesign
2026-08-30 16:05:15
(3 days ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-08-29 20:56:27
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-29 19:36:01
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐ณ๐ฑ
Site.eu
2026-08-28 03:36:41
(5 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
Anonymous
2026-08-27 05:20:37
(6 days ago)
[Thu Aug 27 07:20:33.791467 2026] [authz_core:error] [pid 9547:tid 9576] [client 45.131.195.196:5648 ...
show more
[Thu Aug 27 07:20:33.791467 2026] [authz_core:error] [pid 9547:tid 9576] [client 45.131.195.196:56489] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/index.php, referer: http://cimt-precision.de/wp-login.php
[Thu Aug 27 07:20:34.332995 2026] [authz_core:error] [pid 9547:tid 9590] [client 45.131.195.196:56489] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/index.php, referer: http://cimt-precision.de/wp-login.php
[Thu Aug 27 07:20:34.873485 2026] [authz_core:error] [pid 9547:tid 9597] [client 45.131.195.196:56489] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/index.php, referer: http://cimt-precision.de/wp-login.php
[Thu Aug 27 07:20:35.413123 2026] [authz_core:error] [pid 9547:tid 9599] [client 45.131.195.196:56489] AH01630: client denied by server configuration: /var/www/cimt-precision/wp-admin/index.php, referer: http://cimt-precision.de/wp-login.php
...
show less
Brute-Force
Web App Attack
Anonymous
2026-08-24 12:43:27
(1 week ago)
[Firewall Canary] Temporary ban due to firewall rule match [URI:*/wp-includes/*]
Bad Web Bot
Web App Attack
Anonymous
2026-08-24 11:34:24
(1 week ago)
wp admin page access attempt
...
Hacking
Web App Attack
๐จ๐ฆ
KIsmay
2026-08-23 18:04:55
(1 week ago)
Aug 23 14:04:35 www4 WPAudit[1248687]: 45.131.195.196 www.vhsport.ca "Mozilla/5.0 (X11; Linux x86_64 ...
show more
Aug 23 14:04:35 www4 WPAudit[1248687]: 45.131.195.196 www.vhsport.ca "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" [email protected] :Zb{0@U{vsFjq#j(<?L[Iy0Hi_#9]i-LlJN0=Ec FAIL
Aug 23 14:04:41 www4 WPAudit[1248687]: 45.131.195.196 www.vhsport.ca "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" root:Zb{0@U{vsFjq#j(<?L[Iy0Hi_#9]i-LlJN0=Ec FAIL
Aug 23 14:04:45 www4 WPAudit[1248687]: 45.131.195.196 www.vhsport.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" adminroot:63a9f0ea7bb98050796b649e85481845 FAIL
Aug 23 14:04:50 www4 WPAudit[1248683]: 45.131.195.196 www.vhsport.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" [email protected] :rastap455w0rd FAIL
Aug 23 14:04:55 www4 WPAudit[1248683]: 45.131.195.196 www.vhsport.ca "Mozilla/5.0 (Macint
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-23 17:52:55
(1 week ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-08-23 04:23:47
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 45.131.195.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 45.131.195.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 00:23:42.213720 2026] [security2:error] [pid 5024:tid 5024] [client 45.131.195.196:43165] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||tcjohnston.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tcjohnston.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aop1zl-S2NyCGVDtQ_XYKgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Kenshin869
2026-08-23 00:59:27
(1 week ago)
Wordpress unauthorized access attempt
Brute-Force
๐จ๐ฆ
KIsmay
2026-08-22 21:42:54
(1 week ago)
Aug 22 17:42:34 www4 WPAudit[1143732]: 45.131.195.196 terratherma.com "Mozilla/5.0 (X11; Linux x86_6 ...
show more
Aug 22 17:42:34 www4 WPAudit[1143732]: 45.131.195.196 terratherma.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" admin:Aa123@123 FAIL
Aug 22 17:42:38 www4 WPAudit[1143730]: 45.131.195.196 terratherma.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" pHqghUme:u]H[ww6KrA9F.x-F FAIL
Aug 22 17:42:43 www4 WPAudit[1143732]: 45.131.195.196 terratherma.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" wpapitest\\t:wpapitest123x FAIL
Aug 22 17:42:48 www4 WPAudit[1143730]: 45.131.195.196 terratherma.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" wpapitestt:wpapitest123x FAIL
Aug 22 17:42:54 www4 WPAudit[1143732]: 45.131.195.196 terratherma.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-08-22 19:14:59
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-08-22 04:49:55
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot