|
๐ฌ๐ง
Apache
|
|
(wplogin) WordPress login brute-force 193.19.109.155 (US/United States/-): 5 in the last 300 secs
|
Brute-Force
|
|
Anonymous
|
|
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack
|
|
๐บ๐ธ
lostswordfish.com
|
|
Wordfence waf block on fairregistry
|
Web App Attack
|
|
Anonymous
|
|
RDP brute force attack.
|
Port Scan
Brute-Force
|
|
๐ฆ๐น
CTK
|
|
Customer Site (Grieskirchen FP)
|
Brute-Force
|
|
๐ฒ๐น
Malta
|
|
193.19.109.155 - - [04/Sep/2026:07:34:35 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
Brute-force password attempt
|
Hacking
Web App Attack
Brute-Force
|
|
Anonymous
|
|
Failed Wordpress Logins
|
Web App Attack
|
|
๐ช๐ธ
alferez
|
|
wp2shell bug exploit
|
Hacking
Exploited Host
Web App Attack
|
|
Anonymous
|
|
Attack detected: 193.19.109.155 [2026-07-29]
Categories: 21
--- wp2shell/batch exploit (2 hits) ---
193.19.109.155 - - [29/Jul/2026:10:48:39 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 301 303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWe ...
show more
Attack detected: 193.19.109.155 [2026-07-29]
Categories: 21
--- wp2shell/batch exploit (2 hits) ---
193.19.109.155 - - [29/Jul/2026:10:48:39 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 301 303 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
193.19.109.155 - - [29/Jul/2026:10:48:41 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 308 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
|
Web App Attack
|
|
๐ซ๐ท
mail.avx.gr
|
|
Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 193.19.109.155 - - [19/Jul/2026:21:26:58 +0300] "GET /wp-login.php HTTP/1.1" 404 2426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537 ...
show more
Plesk Fail2Ban jail: Plesk-WebScanners. Evidence: default-10-0-0-4:443 193.19.109.155 - - [19/Jul/2026:21:26:58 +0300] "GET /wp-login.php HTTP/1.1" 404 2426 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
show less
|
Web App Attack
|
|
๐ฉ๐ช
bryth
|
|
Wordpress login/xmlrpc abuse (Sun Jul 19 05:54:44 PM UTC 2026)
|
Hacking
Web App Attack
|
|
๐ฎ๐น
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-07-16 02:58:42,934 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 193.19.109.22 - 2026-07-16 02:58:42cloudlinux2 fail2ban: 2026-07-16 02:59:48,684 fail2ban.filter [1812]: INFO [plesk-wordpress] F ...
show more
cloudlinux2 fail2ban: 2026-07-16 02:58:42,934 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 193.19.109.22 - 2026-07-16 02:58:42cloudlinux2 fail2ban: 2026-07-16 02:59:48,684 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 216.73.163.96 - 2026-07-16 02:59:48cloudlinux2 fail2ban: 2026-07-16 03:00:06,783 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 193.37.33.228 - 2026-07-16 03:00:05cloudlinux2 fail2ban: 2026-07-16 03:00:06,858 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 193.19.109.155 - 2026-07-16 03:00:05cloudlinux2 fail2ban: 2026-07-16 03:00:47,757 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.225 - 2026-07-16 03:00:46cloudlinux2 fail2ban: 2026-07-16 03:00:43,465 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.225 - 2026-07-16 03:00:42cloudlinux2 fail2ban: 2026-07-16 03:00:49,705 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 98.159.37.87 - 2026-07-16 03:00:49cloud
show less
|
Web App Attack
|
|
๐ฎ๐น
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-07-16 01:00:08,672 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 216.73.163.245 - 2026-07-16 01:00:06cloudlinux2 fail2ban: 2026-07-16 01:00:08,174 fail2ban.filter [1812]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-07-16 01:00:08,672 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 216.73.163.245 - 2026-07-16 01:00:06cloudlinux2 fail2ban: 2026-07-16 01:00:08,174 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 45.131.194.6 - 2026-07-16 01:00:06cloudlinux2 fail2ban: 2026-07-16 01:00:33,794 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 216.73.163.101 - 2026-07-16 01:00:33cloudlinux2 fail2ban: 2026-07-16 01:00:51,272 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.230 - 2026-07-16 01:00:49cloudlinux2 fail2ban: 2026-07-16 01:00:53,487 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.224 - 2026-07-16 01:00:49cloudlinux2 fail2ban: 2026-07-16 01:00:51,267 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.206 - 2026-07-16 01:00:49cloudlinux2 fail2ban: 2026-07-16 01:02:05,446 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 193.37.33.160 - 2026-07-16 01:02:01cl
show less
|
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:225170) triggered by 193.19.109.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 01:57:46.428217 2026] [security2:error] [pid 27587:tid 27587] [client 193.19.109.155:40361] ...
show more
(mod_security) mod_security (id:225170) triggered by 193.19.109.155 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 01:57:46.428217 2026] [security2:error] [pid 27587:tid 27587] [client 193.19.109.155:40361] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.letmespeakpodcast.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.letmespeakpodcast.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "alCJ2hC0R99h4FNSxARrLwAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
(wordpress) Failed wordpress login from 193.19.109.155 (US/United States/Washington/Seattle/-/[redacted])
|
Brute-Force
|