🇫🇷
dynamix
2026-09-08 14:15:54
(1 day ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇨🇭
backslash
2026-09-05 23:48:00
(3 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇦
KIsmay
2026-09-02 11:11:23
(1 week ago)
Sep 2 07:10:19 www4 WPAudit[2502992]: 45.131.195.32 goldislandforestproducts.ca "Mozilla/5.0 (Windo ...
show more
Sep 2 07:10:19 www4 WPAudit[2502992]: 45.131.195.32 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" administrator:Password2026 FAIL
Sep 2 07:10:39 www4 WPAudit[2503770]: 45.131.195.32 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" gifp:Password2026 FAIL
Sep 2 07:10:59 www4 WPAudit[2502992]: 45.131.195.32 goldislandforestproducts.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" sbd-admin:Password2026 FAIL
Sep 2 07:11:14 www4 WPAudit[2503770]: 45.131.195.32 goldislandforestproducts.ca "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" goldislandforestproducts:Password2026 FAIL
Sep 2 07:11:22 www4 WPAudit[2502992]: 45.131.195.32 goldislandforestproducts.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, l
...
show less
Brute-Force
Web App Attack
🇺🇸
Jason Howell
2026-09-02 04:03:53
(1 week ago)
45.131.195.32 - - [01/Sep/2026:22:20:51 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 4438 "https:// ...
show more
45.131.195.32 - - [01/Sep/2026:22:20:51 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 4438 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15"
45.131.195.32 - - [01/Sep/2026:22:21:56 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 4437 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.32 - - [01/Sep/2026:22:21:59 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fgannonpool.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 4928 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.32 - - [01/Sep/2026:23:02:31 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 4438 "https://gannonpool.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537
...
show less
Web App Attack
🇪🇸
masterguru
2026-08-28 09:56:52
(1 week ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)
Web App Attack
🇺🇸
lostswordfish.com
2026-08-27 07:20:06
(1 week ago)
Wordfence waf block on fairregistry
Web App Attack
🇹🇷
neron
2026-08-07 01:37:17
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-08-05 20:29:43
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇹🇷
neron
2026-08-04 14:29:42
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇺🇸
ArturShelby
2026-08-03 21:40:50
(1 month ago)
Suspicious path access: /wp-includes/css/buttons.css
Web App Attack
🇹🇷
neron
2026-08-03 08:29:42
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
🇮🇳
evicky2002
2026-08-03 06:00:00
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇨🇦
KIsmay
2026-08-03 03:11:07
(1 month ago)
Aug 2 23:10:48 www4 WPAudit[396974]: 45.131.195.32 terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linu ...
show more
Aug 2 23:10:48 www4 WPAudit[396974]: 45.131.195.32 terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" webadmin:Jane392216 FAIL
Aug 2 23:10:56 www4 WPAudit[396974]: 45.131.195.32 terencegower.com "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" root:Jane392216 FAIL
Aug 2 23:10:57 www4 WPAudit[397287]: 45.131.195.32 terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" Mr-Tech1000:(VEwphZAiLqeIjZ*17**top FAIL
Aug 2 23:11:01 www4 WPAudit[397287]: 45.131.195.32 terencegower.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" metalmaxrs:e8p6b4b2a4f2 FAIL
Aug 2 23:11:06 www4 WPAudit[396974]: 45.131.195.32 terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121
...
show less
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-02 15:45:51
(1 month ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
NL/Netherlands/-
Web App Attack
🇦🇺
afleventoffice.com.au
2026-08-02 12:34:54
(1 month ago)
GET /wp-login.php HTTP/1.1
Web App Attack