๐น๐ท
neron
2026-10-17 08:00:07
(2 weeks ago)
CrowdSec blocked: http:dos detected via OPNsense firewall
Hacking
Web App Attack
๐น๐ท
neron
2026-10-15 16:53:13
(2 weeks ago)
CrowdSec blocked: http:bruteforce detected via OPNsense firewall
Hacking
Web App Attack
๐น๐ท
neron
2026-10-15 10:53:13
(2 weeks ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ฉ๐ช
Viveronese
2026-10-14 02:56:43
(2 weeks ago)
Wordpress vulnerability scanning
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-14 02:40:09
(2 weeks ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
๐บ๐ธ
Ben Schoolland
2026-10-13 22:19:29
(2 weeks ago)
WordPress credential brute-force against chalkwild.com: 1 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:08:28:41 and 13/Oct/2026:08:28:41 UTC, plus 2 GET /wp-admin/ probes that returned 302 to the login page. User-A ...
show more
WordPress credential brute-force against chalkwild.com: 1 failed POST /wp-login.php (HTTP 200, login form re-rendered) between 13/Oct/2026:08:28:41 and 13/Oct/2026:08:28:41 UTC, plus 2 GET /wp-admin/ probes that returned 302 to the login page. User-Agent rotated across 3 distinct strings from this single address. Part of a coordinated campaign from 49 addresses in 45.131.195.0/24 (240 failed logins today), each pacing itself under per-IP rate thresholds. No successful authentication.
show less
Brute-Force
Web App Attack
๐ฉ๐ช
XICTRON
2026-10-13 18:50:15
(2 weeks ago)
WordPress attack attempt detected by Fail2Ban
Web App Attack
๐จ๐ฆ
KIsmay
2026-10-13 17:28:32
(2 weeks ago)
2026-10-13T13:27:54.544702-04:00 www4 WPAudit[2239518]: 45.131.195.130 www.terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" admin:DH!bYsRn6573$3uk FAIL
2026-10-13T13:28:0 ...
show more
2026-10-13T13:27:54.544702-04:00 www4 WPAudit[2239518]: 45.131.195.130 www.terencegower.com "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" admin:DH!bYsRn6573$3uk FAIL
2026-10-13T13:28:04.461719-04:00 www4 WPAudit[2239518]: 45.131.195.130 www.terencegower.com "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" server:F*uckYou FAIL
2026-10-13T13:28:07.888488-04:00 www4 WPAudit[2239518]: 45.131.195.130 www.terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" kobieta:kobieta123$$$ FAIL
2026-10-13T13:28:13.477210-04:00 www4 WPAudit[2239518]: 45.131.195.130 www.terencegower.com "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:120.0) Gecko/20100101 Firefox/120.0" wordcamp:z43218765z FAIL
2026-10-13T13:28:31.874771-04:00 www4 WPAudit[2239518]: 45.131.195.130 www.terencegower.com "Mozilla/5.0 (Ma
...
show less
Brute-Force
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-10-13 07:50:01
(2 weeks ago)
Blocked by CSF 13 firewall - Rule: WPLOGIN
NL/Netherlands/-
Web App Attack
Anonymous
2026-10-12 23:36:51
(2 weeks ago)
Banned by Fail2Ban on server
Web App Attack
๐น๐ท
neron
2026-10-12 22:53:13
(2 weeks ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-10-12 12:53:54
(2 weeks ago)
WordPress wp-login.php Brute Force Attack
Brute-Force
Web App Attack
๐ต๐ฑ
nakordoni.eu
2026-10-10 23:30:06
(3 weeks ago)
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: VPN Consumer Secaucus, NJ, USA (US), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 89/100.
Bad Web Bot
Web App Attack
๐บ๐ธ
Jason Howell
2026-10-10 21:58:17
(3 weeks ago)
45.131.195.130 - - [10/Oct/2026:16:58:10 -0500] "POST /wp-login.php HTTP/1.1" 200 6090 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Saf ...
show more
45.131.195.130 - - [10/Oct/2026:16:58:10 -0500] "POST /wp-login.php HTTP/1.1" 200 6090 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
45.131.195.130 - - [10/Oct/2026:16:58:12 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 500 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0"
45.131.195.130 - - [10/Oct/2026:16:58:13 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.ponderosamobilehomepark.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 3736 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0"
45.131.195.130 - - [10/Oct/2026:16:58:14 -0500] "POST /wp-login.php HTTP/1.1" 200 2080 "https://www.ponderosamobilehomepark.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Appl
...
show less
Web App Attack
๐บ๐ธ
Jason Howell
2026-10-10 15:57:09
(3 weeks ago)
45.131.195.130 - - [10/Oct/2026:10:56:59 -0500] "POST /wp-login.php HTTP/1.1" 200 6321 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari ...
show more
45.131.195.130 - - [10/Oct/2026:10:56:59 -0500] "POST /wp-login.php HTTP/1.1" 200 6321 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.130 - - [10/Oct/2026:10:57:02 -0500] "GET /wp-admin/index.php HTTP/1.1" 302 468 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.130 - - [10/Oct/2026:10:57:03 -0500] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.barbsgardenandpantry.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 4116 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
45.131.195.130 - - [10/Oct/2026:10:57:07 -0500] "POST /wp-login.php HTTP/1.1" 200 2317 "https://www.barbsgardenandpantry.com/wp-login.php" "Mozilla/5
...
show less
Web App Attack