๐ฒ๐ฝ
octageeks.com
2026-08-13 04:16:55
(3 days ago)
Wordpress malicious attack:[octaflood]
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-12 06:23:55
(4 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
nyt
2026-08-12 05:55:36
(4 days ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
Anonymous
2026-08-11 22:45:21
(4 days ago)
Web attack blocked by Wordfence on cuypersinvalkenburg.nl (8 hits). Reported by CRMON.
Web App Attack
๐ซ๐ท
LoneRider
2026-08-11 19:33:39
(4 days ago)
45.92.229.169 - - [11/Aug/2026:21:33:31 +0200] "POST //wp/wp-login.php HTTP/1.1" 200 8049 "https://n ...
show more
45.92.229.169 - - [11/Aug/2026:21:33:31 +0200] "POST //wp/wp-login.php HTTP/1.1" 200 8049 "https://nedcann.com//wp/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.92.229.169 - - [11/Aug/2026:21:33:36 +0200] "POST //wp/wp-login.php HTTP/1.1" 200 8048 "https://nedcann.com//wp/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36"
45.92.229.169 - - [11/Aug/2026:21:33:38 +0200] "POST //wp/wp-login.php HTTP/1.1" 200 7989 "https://nedcann.com//wp/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
LRob
2026-08-01 14:31:02
(2 weeks ago)
CrowdSec: WordPress login-page flood (repeated GET /wp-login.php) | req: /wp-login.php?redirect_to=h ...
show more
CrowdSec: WordPress login-page flood (repeated GET /wp-login.php) | req: /wp-login.php?redirect_to=https%3A%2F%2Ftherma-sud.fr%2Fwp-admin%2Findex.php&reauth=1 | 2 distinct paths | UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36
show less
Brute-Force
Web App Attack
Anonymous
2026-08-01 04:53:00
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2026-07-31 06:56:35
(2 weeks ago)
45.92.229.169 - [31/Jul/2026:09:56:12 +0300] "POST /wp-login.php HTTP/1.1" 200 3361 "https://www.tyo ...
show more
45.92.229.169 - [31/Jul/2026:09:56:12 +0300] "POST /wp-login.php HTTP/1.1" 200 3361 "https://www.tyoluotsi.fi/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/118.0.2" "2.90"
45.92.229.169 - [31/Jul/2026:09:56:19 +0300] "POST /wp-login.php HTTP/1.1" 200 3365 "https://www.tyoluotsi.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/122.0" "2.89"
45.92.229.169 - [31/Jul/2026:09:56:25 +0300] "POST /wp-login.php HTTP/1.1" 200 3363 "https://www.tyoluotsi.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36" "2.89"
45.92.229.169 - [31/Jul/2026:09:56:29 +0300] "POST /wp-login.php HTTP/1.1" 200 3370 "https://www.tyoluotsi.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36" "2.89"
45.92.229.169 - [31/Jul/2026:09:56:34 +0300] "POST /wp-login.php HTTP/1.1" 200 3319 "https://ww
...
show less
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-07-30 16:36:58
(2 weeks ago)
CrowdSec: WordPress login-page flood (repeated GET /wp-login.php) | req: /wp-login.php?redirect_to=h ...
show more
CrowdSec: WordPress login-page flood (repeated GET /wp-login.php) | req: /wp-login.php?redirect_to=https%3A%2F%2Ffondationceiba.com%2Fwp-admin%2Findex.php&reauth=1 | UA: Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/122.0
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-07-30 11:39:04
(2 weeks ago)
10 attempts against mh_ha-misc-ban on pf221105
Brute-Force
Web App Attack
๐ซ๐ท
solution.it
2026-07-30 02:59:10
(2 weeks ago)
[Thu Jul 30 04:59:10.401985 2026] [php7:error] [pid 1309639:tid 1309639] [client 45.92.229.169:58753 ...
show more
[Thu Jul 30 04:59:10.401985 2026] [php7:error] [pid 1309639:tid 1309639] [client 45.92.229.169:58753] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-15 07:58:57
(1 month ago)
cloudlinux2 fail2ban: 2026-07-15 09:53:53,754 fail2ban.filter [1812]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-15 09:53:53,754 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 209.87.169.29 - 2026-07-15 09:53:53cloudlinux2 fail2ban: 2026-07-15 09:53:47,110 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 91.193.232.250 - 2026-07-15 09:53:46cloudlinux2 fail2ban: 2026-07-15 09:54:07,121 fail2ban.actions [1812]: NOTICE [plesk-modsecurity] Unban 122.183.32.118cloudlinux2 fail2ban: 2026-07-15 09:54:31,013 fail2ban.actions [1812]: NOTICE [recidive] Unban 119.23.223.61cloudlinux2 fail2ban: 2026-07-15 09:54:54,396 fail2ban.actions [1812]: NOTICE [plesk-modsecurity] Unban 163.223.136.148cloudlinux2 fail2ban: 2026-07-15 09:54:57,969 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 136.144.42.42 - 2026-07-15 09:54:57cloudlinux2 fail2ban: 2026-07-15 09:55:14,561 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 172.98.32.42 - 2026-07-15 09:55:13cloudlinux2 fail2ban: 2026-07-15 09:55:15,170 fail2ban.filter [1812
show less
Web App Attack
๐บ๐ธ
xmission.com
2026-07-07 10:28:19
(1 month ago)
Blocked by UFW (TCP on 1)
Source port: 58801
TTL: 115
Packet length: 52
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 1)
Source port: 58801
TTL: 115
Packet length: 52
TOS: 0x08
This report (for 45.92.229.169) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2026-07-03 19:23:29
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-07-03 13:31:32
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack