🇫🇷
SpaceHost-Server
2026-10-21 22:24:54
(6 days ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-20 22:21:49
(1 week ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-10-20 07:00:52
(1 week ago)
2026/10/20 07:00:42 [error] 2487317#2487317: *17504055 access forbidden by rule, client: 45.131.195.129, server: antzfund.com, request: "GET /admin.php HTTP/1.1", host: "antzfund.com"
2026/10/20 07:00:44 [error] 2487317#2487317: *17504199 access forb ...
show more
2026/10/20 07:00:42 [error] 2487317#2487317: *17504055 access forbidden by rule, client: 45.131.195.129, server: antzfund.com, request: "GET /admin.php HTTP/1.1", host: "antzfund.com"
2026/10/20 07:00:44 [error] 2487317#2487317: *17504199 access forbidden by rule, client: 45.131.195.129, server: antzfund.com, request: "GET /.wp/wso.php HTTP/1.1", host: "antzfund.com"
2026/10/20 07:00:51 [error] 2487317#2487317: *17504231 access forbidden by rule, client: 45.131.195.129, server: antzfund.com, request: "GET /images/upload.php HTTP/1.1", host: "antzfund.com"
...
show less
Web App Attack
🇳🇱
Site.eu
2026-10-20 04:26:52
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇹🇷
neron
2026-10-17 08:00:07
(1 week ago)
CrowdSec blocked: http:dos detected via OPNsense firewall
Hacking
Web App Attack
🇩🇪
Viveronese
2026-10-14 03:10:12
(2 weeks ago)
Wordpress vulnerability scanning
Web App Attack
🇳🇱
Site.eu
2026-10-14 02:24:01
(2 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇺🇸
Ben Schoolland
2026-10-13 22:19:29
(2 weeks ago)
WordPress credential brute-force against chalkwild.com: 5 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:05:03:19 and 13/Oct/2026:08:53:13 UTC, plus 8 GET /wp-admin/ probes that returned 302 to the login page. User-A ...
show more
WordPress credential brute-force against chalkwild.com: 5 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:05:03:19 and 13/Oct/2026:08:53:13 UTC, plus 8 GET /wp-admin/ probes that returned 302 to the login page. User-Agent rotated across 13 distinct strings from this single address. Part of a coordinated campaign from 49 addresses in 45.131.195.0/24 (240 failed logins today), each pacing itself under per-IP rate thresholds. No successful authentication.
show less
Brute-Force
Web App Attack
🇩🇪
XICTRON
2026-10-13 18:40:12
(2 weeks ago)
WordPress attack attempt detected by Fail2Ban
Web App Attack
🇨🇦
KIsmay
2026-10-13 17:56:36
(2 weeks ago)
2026-10-13T13:56:13.251402-04:00 www4 WPAudit[2242614]: 45.131.195.129 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" nora85:nora85! FAIL
2026-10-13T13:56:16.1090 ...
show more
2026-10-13T13:56:13.251402-04:00 www4 WPAudit[2242614]: 45.131.195.129 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" nora85:nora85! FAIL
2026-10-13T13:56:16.109025-04:00 www4 WPAudit[2242474]: 45.131.195.129 www.terencegower.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" nora85:NORA85 FAIL
2026-10-13T13:56:23.664470-04:00 www4 WPAudit[2242614]: 45.131.195.129 www.terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" terenceg:terenceg FAIL
2026-10-13T13:56:30.398393-04:00 www4 WPAudit[2242474]: 45.131.195.129 www.terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" terenceg:password FAIL
2026-10-13T13:56:35.665206-04:00 www4 WPAudit[2242614]: 45.131.195.129 www.terencegower.com "Mozilla/5.0 (Maci
...
show less
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-10-13 07:36:37
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
NL/Netherlands/-
Web App Attack
2026-10-12 23:32:17
(2 weeks ago)
Banned by Fail2Ban on server
Web App Attack
🇫🇷
dynamix
2026-10-12 14:41:35
(2 weeks ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-10-11 01:46:38
(2 weeks ago)
(wplogin) Failed WordPress login from 45.131.195.129 (US/United States/-): 5 in the last 3600 secs (0-122)
Hacking
🇺🇸
Jason Howell
2026-10-10 21:28:41
(2 weeks ago)
45.131.195.129 - - [10/Oct/2026:16:28:32 -0500] "POST /wp-login.php HTTP/1.1" 200 6091 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537. ...
show more
45.131.195.129 - - [10/Oct/2026:16:28:32 -0500] "POST /wp-login.php HTTP/1.1" 200 6091 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
45.131.195.129 - - [10/Oct/2026:16:28:32 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 500 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
45.131.195.129 - - [10/Oct/2026:16:28:34 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.ponderosamobilehomepark.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3736 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15"
45.131.195.129 - - [10/Oct/2026:16:28:39 -0500] "POST /wp-login.php HTTP/1.1" 200 2080 "https://www.ponderosamobilehomepark.com/wp-
...
show less
Web App Attack
