๐ซ๐ท
โจ
2026-11-02 01:32:10
(18 minutes ago)
Rule : WORDPRESS BOT
[2026-11-02 01:30:29] Unauthorized login attempt to endospecialist.co.uk wordpress from IP 155.2.215.82 with username Administrator
Port Scan
๐น๐ท
neron
2026-10-29 22:04:08
(3 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
๐จ๐ฆ
KIsmay
2026-10-29 19:06:48
(3 days ago)
2026-10-29T11:54:22.908676-04:00 www4 WPAudit[1059789]: 155.2.215.82 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" gifp:gifp2025 FAIL
2026-10-29T11:56:36.249339-04:00 www4 WPAudit[1059925]: ...
show more
2026-10-29T11:54:22.908676-04:00 www4 WPAudit[1059789]: 155.2.215.82 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" gifp:gifp2025 FAIL
2026-10-29T11:56:36.249339-04:00 www4 WPAudit[1059925]: 155.2.215.82 hvrhaulers.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" hvr:hvr2025 FAIL
2026-10-29T13:54:56.153220-04:00 www4 WPAudit[1069225]: 155.2.215.82 goldislandforestproducts.ca "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" gifp:gifp01 FAIL
2026-10-29T15:04:38.010359-04:00 www4 WPAudit[1074442]: 155.2.215.82 goldislandforestproducts.ca "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" gifp:GIFP FAIL
2026-10-29T15:06:48.042429-04:00 www4 WPAudit[1075239]: 155.2.215.82 hvrhaulers.com "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" hvr:HVR FAIL
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-29 15:53:54
(3 days ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
Web App Attack
๐ซ๐ฎ
Vaino Karppi
2026-10-29 13:14:54
(3 days ago)
Honeypot triggered: Tried to access restricted page /wp-login.php
Hacking
๐น๐ท
neron
2026-10-28 22:01:02
(4 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
๐น๐ท
neron
2026-10-27 16:01:47
(5 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
๐น๐ท
neron
2026-10-26 16:34:59
(6 days ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
๐น๐ท
neron
2026-10-25 10:34:59
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
Anonymous
2026-10-23 20:51:00
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฌ๐ง
neo101
2026-10-23 03:03:29
(1 week ago)
Automated Threat Probe: Host probed endpoint '/wp-login.php' using WP Brute-Forcer. Malicious intent confirmed. Served Fake AWS Keys counter-measure.
Hacking
Web App Attack
๐น๐ท
neron
2026-10-22 10:34:59
(1 week ago)
CrowdSec blocked: http:scan detected via OPNsense firewall
Hacking
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-20 00:54:06
(1 week ago)
cloudlinux2 fail2ban: 2026-10-20 02:48:48,979 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 193.36.224.195 - 2026-10-20 02:48:48cloudlinux2 fail2ban: 2026-10-20 02:49:34,153 fail2ban.filter [1957]: INFO [plesk-modsecurity ...
show more
cloudlinux2 fail2ban: 2026-10-20 02:48:48,979 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 193.36.224.195 - 2026-10-20 02:48:48cloudlinux2 fail2ban: 2026-10-20 02:49:34,153 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 196.65.202.84 - 2026-10-20 02:49:34cloudlinux2 fail2ban: 2026-10-20 02:50:17,585 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 190.21.252.148 - 2026-10-20 02:50:17cloudlinux2 fail2ban: 2026-10-20 02:51:02,033 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 181.91.44.108 - 2026-10-20 02:51:01cloudlinux2 fail2ban: 2026-10-20 02:51:24,169 fail2ban.actions [1957]: NOTICE [plesk-wordpress] Unban 193.36.224.210cloudlinux2 fail2ban: 2026-10-20 02:51:44,540 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 155.2.215.82 - 2026-10-20 02:51:43cloudlinux2 fail2ban: 2026-10-20 02:52:03,751 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 172.98.33.240 - 2026-10-20 02:52:03cloudlinux2 fail2ban: 2026-
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-19 19:38:57
(1 week ago)
cloudlinux2 fail2ban: 2026-10-19 21:33:58,297 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 185.251.19.130 - 2026-10-19 21:33:57cloudlinux2 fail2ban: 2026-10-19 21:34:06,854 fail2ban.filter [1957]: INFO [plesk-modsecurity ...
show more
cloudlinux2 fail2ban: 2026-10-19 21:33:58,297 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 185.251.19.130 - 2026-10-19 21:33:57cloudlinux2 fail2ban: 2026-10-19 21:34:06,854 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 223.181.99.104 - 2026-10-19 21:34:06cloudlinux2 fail2ban: 2026-10-19 21:34:27,214 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 183.252.92.141 - 2026-10-19 21:34:27cloudlinux2 fail2ban: 2026-10-19 21:35:45,075 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 155.2.215.82 - 2026-10-19 21:35:44cloudlinux2 fail2ban: 2026-10-19 21:35:46,902 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 49.150.108.120 - 2026-10-19 21:35:46cloudlinux2 fail2ban: 2026-10-19 21:37:09,447 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 103.173.7.55 - 2026-10-19 21:37:09cloudlinux2 fail2ban: 2026-10-19 21:37:16,183 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 104.22.43.60 - 2026-10-19 21:37:16
show less
Web App Attack
๐ง๐ช
cmbplf
2026-10-13 01:47:26
(2 weeks ago)
3.000 POST requests with url.path */wp-login.php
Brute-Force
Bad Web Bot